1. The core promise: your inputs stay on your device
AnyHash is a set of static HTML pages. Every hash — MD5, SHA-1/SHA-256/SHA-384/SHA-512, bcrypt, and Argon2id — is computed inside your own browser using the Web Crypto API, a bundled JavaScript implementation (MD5 and bcrypt), or a Web Worker running WebAssembly (Argon2id). Nothing you type, paste, or drop is ever transmitted to us, to a server, or to an advertising network. There is no backend that receives your plaintext, and there is nothing on our side that could receive it: this site is served as finished static files.
You can verify this yourself: open your browser's developer tools, switch to the Network tab, and use any tool on the site. The only network requests you will see are the page, its stylesheets, its fonts, and (when advertising is enabled) the ad scripts described in section 4. No request contains the content you hashed.
2. What we never do
- No accounts, sign-ups, or logins — there is literally no profile to create or compromise.
- No analytics, telemetry, or logging of your inputs.
- No cookies set directly by this site's own code.
- No fingerprinting or tracking pixels added by us.
- No third-party scripts that can see your hash inputs.
- No sale, lease, or barter of any user data — we hold none.
3. Hosting and infrastructure logs
The site is served as static files from a hosting provider (or "edge network"). Such providers routinely record standard HTTP metadata for security and operational purposes: your IP address, user agent, the requested URL, a timestamp, and transfer size. This is the same infrastructural logging performed by virtually every website and CDN on the internet. It is used to detect abuse (for example, distributed attacks or anomalous traffic), to estimate bandwidth, and to keep services running. We do not combine these logs with content, attempt to identify you, or sell them. Standard hosting retention policies apply; treat them as a privacy floor, not a ceiling.
4. Third-party advertising (Google AdSense)
To keep AnyHash free, the site may display advertising from a third-party ad network — including, when enabled, Google AdSense, which uses the DoubleClick cookie. Ad networks may place or read cookies on your browser and may use web beacons to measure the effectiveness of advertising.
Specifically, Google as a third-party vendor may:
- use the DoubleClick cookie to serve ads on this site based on your prior visits to this and other websites ("interest-based" / personalized advertising);
- collect usage data about the ads you've seen and interacted with, which Google uses to make ads more relevant;
- share that data with Google's advertising partners and measurement services in accordance with Google's own policies.
Ways to opt out:
- Google Ads Settings: visit adssettings.google.com to opt out of personalized advertising from Google and its partners.
- Third-party opt-outs: visit the Network Advertising Initiative opt-out page and the Digital Advertising Alliance's YourAdChoices page.
- Cookies: block or clear third-party cookies in your browser settings (or use a privacy-enhancing extension). Advertisers may still show you non-personalized ads, but your on-site behavior will not be used to tailor them.
Critically: none of this advertising machinery ever observes what you hash. Your plaintext input and the resulting digest are computed locally and exist only inside the closed page. Advertising cookies describe your browsing, not your hashing.
5. Cookies in general
This site's own code does not set cookies. Third-party ad providers may set cookies as described in section 4; those cookies are governed by the providers' policies, which you can review when you visit their opt-out and preference pages. The strictly necessary serving of the page itself uses HTTP caching, not cookies.
6. Legal bases and your rights (GDPR / UK / Brazil / California)
Because we engage in no processing of personal data ourselves, there is no data we hold that you could request, correct, or delete. If you contact us by email, the content of that message and its metadata are retained only for as long as needed to respond, and are not used for any other purpose.
For residents of regions with data-protection laws (the GDPR, the UK GDPR, Brazil's LGPD, or the California Consumer Privacy Act as amended by the CPRA): the only personal data associated with your visits to this site is that collected by third-party advertising and hosting infrastructure, which is processed under those providers' lawful bases and subject to the rights and opt-outs they offer. To exercise any data subject right (access, erasure, restriction, portability), email us at the contact below and we will relay or coordinate as appropriate.
7. Security
The site is served over HTTPS, and the tools run on the Web Crypto API and audited open-source implementations. Because your inputs never leave your browser, the typical privacy attack surface (a server-side breach, a logging leak, a database theft) simply does not exist on our side. As with any website, we recommend using a current browser and keeping it updated.
8. Changes to this policy
If our practices change — for example, adding a different advertising provider, analytics, or any form of data collection — this page will be updated and re-dated, and material changes will be announced on the homepage. We will not quietly start collecting the data we are currently promising not to collect.
9. Contact
Questions about this policy can be sent to contact@anyhash.online or via our Contact page.