This policy describes the interactive tools as implemented in their page markup and JavaScript checked on 2026-11-03. Tool calculations run in your browser. The inventory below names the values each tool reads, what it does with them, and whether the reviewed tool code sends or persistently stores them.
Input and data-flow inventory
Password checker, generator, and passphrase tool
- Inputs
- Password text for the local pattern check; requested password length; passphrase word count; and password length plus character-pool choice for the mathematical estimate.
- Browser processing
- The checker tests a few text patterns in the page. The generators use the browser's cryptographic random-number API and display the generated value in the page. The estimator calculates a theoretical search space from the two selected values.
- Requests and storage
- The reviewed page uses local scripts and does not submit these values or write them to cookies, local storage, or session storage. Password text and generated results remain in the page until cleared, replaced, or the page is left. Clear the checker field when finished; generated secrets remain visible in the result until replaced or the page is left.
Privacy checklist
- Inputs
- Counts for accounts in scope, accounts with unique passwords, and accounts with multifactor authentication.
- Browser processing
- Local arithmetic produces a count of accounts that may need a unique-password review and repeats the MFA count.
- Requests and storage
- The reviewed code does not submit or persist the counts. They remain in the open page fields and result until changed or the page is left.
IP and DNS check explainer
- Inputs
- None. The page explains how to use a separate IP or DNS test; it does not read your device's public IP, query DNS, or run a lookup.
- Requests and storage
- The page does not send an address to a test service and has no tool input to store. If you follow a test-service or source link, that destination receives a request under its own policies.
VPN goal checker
- Inputs
- Your selected privacy goal and whether you are comfortable trusting a VPN provider.
- Browser processing
- Local branching selects a prewritten explanation. The tool does not ask for a name, account, or free-text description.
- Requests and storage
- The reviewed code does not submit or persist these choices. They remain selected in the page until changed or the page is left.
VPN speed calculator
- Inputs
- Between two and ten paired VPN-off and VPN-on readings, the selected download/upload direction, and optional test-condition notes.
- Browser processing
- Local arithmetic reports median readings, the median paired Mbps difference, and median paired percentage change. Zero-baseline rounds are omitted from the percentage median. The tool does not measure your connection.
- Requests and storage
- The reviewed code does not submit or persist readings or notes. They remain in the open page fields and result until cleared or the page is left.
VPN subscription cost calculator
- Inputs
- First and renewal amounts, the months covered by each, a comparison horizon, and a currency label.
- Browser processing
- Local arithmetic counts charges whose billing dates fall inside the chosen horizon and calculates an average monthly budget. It does not fetch prices or contact a provider.
- Requests and storage
- The reviewed code does not submit or persist the amounts or terms. They remain in the open page fields and result until changed or the page is left.
VPN household device and account chooser
- Inputs
- Whole-number estimates for people needing separate accounts and devices used simultaneously.
- Browser processing
- Local branching displays the entered planning case and compares it with fixed, attributed provider statements. It does not check plan availability or contact providers.
- Requests and storage
- The reviewed code does not submit or persist the counts. They remain in the open page fields and result until changed or the page is left. Opening provider sources sends a request to those providers.
VPN account recovery and MFA checklist
- Inputs
- Checkbox selections about which account recovery and MFA steps the reader has reviewed. The tool asks for no account identifier, password, MFA code, or recovery code.
- Browser processing
- The local script counts checked boxes and lists the unchecked prompts. It does not verify provider settings or determine account recovery eligibility.
- Requests and storage
- The reviewed code does not submit or persist checkbox selections. They remain in the open page until cleared or the page is left; the clear button resets them.
VPN split-tunneling rule planner
- Inputs
- Up to eight user-entered app, site, or traffic labels and a selected intended route: through the VPN, outside the VPN, or undecided.
- Browser processing
- The local script groups non-empty labels by selected route. It does not configure routing or verify platform/provider support.
- Requests and storage
- The reviewed code does not submit or persist labels or choices. They remain in the open page until cleared or the page is left.
VPN visibility matrix
- Inputs
- Selections for VPN status, HTTPS or HTTP, and the DNS route.
- Browser processing
- Local branching builds an educational visibility summary from fixed text and source links; it does not inspect your network traffic.
- Requests and storage
- The reviewed code does not submit or persist these selections. They remain selected with the result in the open page until changed or the page is left.
VPN threat model chooser
- Inputs
- Selections for the observer you are concerned about and the information you want to protect.
- Browser processing
- Local branching displays general, prewritten guidance. The tool does not request details about a specific person, incident, or organization.
- Requests and storage
- The reviewed code does not submit or persist these selections. They remain selected with the result in the open page until changed or the page is left.
IPv4 subnet calculator
- Inputs
- An IPv4 address and CIDR prefix.
- Browser processing
- The local script parses the text and calculates address boundaries. It does not perform a DNS, registry, or reachability lookup.
- Requests and storage
- The reviewed code does not submit or persist the address or prefix. They remain in the open page fields and result until changed or the page is left.
IPv6 address validator
- Inputs
- An IPv6 address written as text.
- Browser processing
- The local script checks syntax and displays normalized and expanded forms. It does not perform DNS or network reachability checks.
- Requests and storage
- The reviewed code does not submit or persist the address. It remains in the open page field and result until changed or the page is left.
Requests, storage, and limits of this review
The reviewed interactive pages use buttons and local JavaScript; they do not submit tool fields through a form. Their assigned scripts contain no network-request or browser-storage calls, and the pages do not embed a third-party test service. Opening a page still requires ordinary requests for that page and its site assets. The site host may process standard request logs. Clicking an external source or test-service link sends a request to that destination.
Inputs and results can be visible to someone who can access your open browser page. This source review does not cover browser extensions, a compromised device, future code changes, or the hosting provider's log configuration. Do not enter a password you currently use on an important account.
Review method
The inventory follows prompts in the W3C Self-Review Questionnaire: Security and Privacy (Group Note published 2025-04-18; accessed 2026-11-03) to identify information exposed by a feature and whether state persists across browsing sessions. That document is a design review aid for web-platform specifications, not a certification or audit of this site. The findings here are limited to the named page markup and scripts assigned in site/site.json.
Impact — TODO: apply/approval and configure referral URL — referral link not configured.
PartnerStack — TODO: apply/approval and configure referral URL — referral link not configured.
CJ Affiliate — TODO: apply/approval and configure referral URL — referral link not configured.