Introduction
This Cookie Policy explains how JWT Secret Key Generator uses cookies and similar tracking technologies when you visit our website at jwtsecretkeygenerator.com.
We use cookies for three main purposes: to make the site work properly, to understand how people use our tool (analytics), and to display advertisements that keep the tool free. This policy provides complete transparency about every cookie we use and how you can control them.
For broader privacy information, please also review our Privacy Policy.
What Are Cookies?
If you're new to cookies (the digital kind, not the delicious kind), here's a quick explanation:
Cookies are small text files that websites place on your device (computer, phone, tablet) when you visit them. They typically contain:
- A unique identifier (like a random string of letters and numbers)
- The domain name of the website that set the cookie
- An expiration date (how long the cookie will last)
- Sometimes additional data specific to that website
When you revisit a website, your browser sends these cookies back to the site, allowing it to "remember" things about you or your previous visits.
Types of Cookies (Generally)
Across the internet, cookies are typically categorized as:
- Strictly Necessary Cookies: Essential for a website to function (e.g., shopping cart, login sessions)
- Functional Cookies: Remember user preferences like language or region
- Analytics/Performance Cookies: Track how visitors use a website to help improve it
- Marketing/Advertising Cookies: Track visitors across websites to show targeted ads
First-Party vs. Third-Party Cookies
- First-Party Cookies: Set by the website you're visiting (us)
- Third-Party Cookies: Set by external services like Google Analytics or advertising networks
What Cookies We Use
We use cookies for three main purposes: essential functionality, analytics, and advertising. Here's a complete breakdown:
1. Essential/Functional Cookies
These cookies are necessary for the website to function properly or provide requested features:
| Cookie Name | Purpose | Duration | Category |
|---|---|---|---|
| lang_preference | Stores your selected language | 1 year | First-Party Essential |
| cookie_consent | Remembers your cookie consent preferences | 1 year | First-Party Essential |
| dismissed_notices | Tracks which informational banners you've closed | 30 days | First-Party Functional |
Legal Basis: These cookies are strictly necessary (GDPR Article 6(1)(f) - legitimate interest) or don't process personal data. Consent is not required under GDPR or ePrivacy Directive.
What They DON'T Do: These cookies don't track your behavior, build advertising profiles, or access your JWT secret keys. They only store basic preferences locally.
2. Analytics Cookies (Google Analytics)
We use Google Analytics to understand how visitors use our site and improve the user experience:
| Cookie Name | Purpose | Duration | Set By |
|---|---|---|---|
| _ga | Distinguishes unique users and calculates visitor, session, and campaign data | 2 years | Google Analytics (Third-Party) |
| _gid | Stores and updates a unique value for each page visited | 24 hours | Google Analytics (Third-Party) |
| _gat | Throttles request rate to limit data collection on high-traffic sites | 1 minute | Google Analytics (Third-Party) |
| _ga_ |
Persists session state for Google Analytics 4 | 2 years | Google Analytics (Third-Party) |
What Analytics Cookies Track:
- Pages you visit and how you navigate through the site
- Time spent on each page and overall session duration
- Browser type, device type, and screen resolution
- Approximate geographic location (country/region/city based on IP address)
- Referring websites and search terms that brought you to our site
- Which features you use and how often
What Analytics Cookies DON'T Track:
- Your JWT secret keys (they never leave your browser)
- Your personal identity (unless you voluntarily email us)
- Precise GPS location or home address
- Content you type into the tool
Legal Basis: Legitimate interest (GDPR Article 6(1)(f)) for understanding site usage. In some jurisdictions (EU/EEA), we also obtain consent.
Data Processor: Google LLC. Analytics data is subject to Google's Privacy Policy.
Opt-Out Options:
- Install the Google Analytics Opt-Out Browser Add-on
- Reject analytics cookies in our consent banner (EU/EEA/UK visitors)
- Block analytics cookies in your browser settings
- Use privacy-focused browsers with built-in tracking protection
3. Advertising Cookies (Google AdSense & Partners)
We display advertisements to keep this tool free. Advertising networks use cookies to serve relevant ads and measure performance:
| Cookie Name/Type | Purpose | Duration | Set By |
|---|---|---|---|
| IDE | Used to serve targeted ads and measure ad campaign effectiveness | 2 years | Google DoubleClick (Third-Party) |
| DSID | Identifies logged-in users on Google sites and remembers ad preferences | 2 weeks | Google DoubleClick (Third-Party) |
| __gads, __gac | Registers and tracks ad impressions, clicks, and interactions | Up to 2 years | Google AdSense (Third-Party) |
| NID | Stores preferences and personalizes ads based on recent searches and interactions | 6 months | Google (Third-Party) |
| 1P_JAR | Collects website statistics and tracks conversion rates | 1 month | Google (Third-Party) |
| CONSENT | Stores user consent state for Google services | 20 years | Google (Third-Party) |
| Various partner cookies | Additional advertising partners may set their own cookies | Varies (typically up to 2 years) | Ad network partners (Third-Party) |
What Advertising Cookies Track:
- Which ads you view, click on, or interact with
- Your browsing behavior across websites (for interest-based advertising)
- Device type, browser, and approximate geographic location
- Inferred interests and demographic categories (e.g., "technology enthusiast," "developer")
- Ad frequency (to avoid showing the same ad too many times)
- Ad effectiveness and conversion tracking
Personalized vs. Non-Personalized Ads:
- Personalized Ads: Based on your interests and browsing history across websites. Shows ads relevant to your inferred interests. Requires consent in the EU/EEA/UK.
- Non-Personalized Ads: Based only on the current page content and general location (country level). Doesn't use your browsing history. Doesn't require consent.
Legal Basis: Consent (GDPR Article 6(1)(a)) for personalized advertising. Legitimate interest for non-personalized ads and ad measurement.
Data Processors: Google AdSense and potentially other advertising networks. Each has its own privacy policy.
Opt-Out Options:
- Adjust your Google Ad Settings to disable personalized ads
- Use the DAA WebChoices Tool (USA)
- Use the EDAA Your Online Choices Tool (Europe)
- Reject advertising cookies in our consent banner (EU/EEA/UK visitors)
- Enable "Limit Ad Tracking" on iOS or opt out of "Ads Personalization" on Android
- Use ad-blocking browser extensions (uBlock Origin, AdBlock Plus, Privacy Badger)
4. Third-Party Cookies (Google Fonts)
Google Fonts may set cookies when loading typefaces from their CDN:
- Purpose: Font delivery, caching optimization, and basic usage analytics
- Data Collected: IP address, browser type, font file requests, timing data
- Privacy Policy: Google Privacy Policy
- Control: You can block fonts.googleapis.com in your browser if preferred—our tool will use system fonts instead
Cookie Consent Management
We respect your privacy choices and provide clear options for managing cookies.
For EU/EEA/UK Visitors
When you first visit our site from the European Union, European Economic Area, or United Kingdom, you'll see a cookie consent banner with these options:
- Accept All: Allows essential, analytics, and advertising cookies (including personalized ads). This enables all site features and supports our free tool through ad revenue.
- Reject Non-Essential: Only essential/functional cookies are set. No analytics or advertising cookies. The tool still works perfectly.
- Customize Preferences: Choose which cookie categories to allow. For example, you might accept analytics cookies but reject advertising cookies.
Your choice is stored in the cookie_consent cookie so we remember your preference on
future visits.
For California Residents (CCPA/CPRA)
California residents have additional rights under state privacy law:
- Opt out of the "sale" or "sharing" of personal information (which includes personalized advertising)
- Use the "Do Not Sell or Share My Personal Information" link in our footer
- We honor Global Privacy Control (GPC) signals from your browser
- When GPC is enabled, we automatically disable personalized advertising
For All Other Visitors
While some jurisdictions don't legally require cookie consent, we still provide transparency and control:
- You can adjust cookie settings anytime using the "Cookie Settings" link in our footer
- You can manage cookies directly in your browser settings
- You can opt out of personalized advertising through industry opt-out tools
Changing Your Mind
You can change your cookie preferences at any time:
- Cookie Settings Link: Click "Cookie Settings" in our footer to adjust preferences
- Clear Cookies: Delete all cookies and revisit the site to see the consent banner again
- Browser Settings: Use your browser's privacy settings to manage cookies directly
- Third-Party Tools: Adjust settings in Google Ad Settings, Analytics opt-out tools, etc.
How to Control Cookies
You have complete control over cookies on your device. Here's how to manage them:
Browser Settings
All modern browsers allow you to control cookie settings. Here's how to access cookie controls in popular browsers:
- Google Chrome: Settings → Privacy and Security → Cookies and other site data → Block all cookies / Block third-party cookies / Clear cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage settings and clear cookies
- Safari: Preferences → Privacy → Manage Website Data → Block all cookies / Remove cookies
- Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data → Block/manage cookies
- Opera: Settings → Privacy & Security → Cookies and other site data → Manage cookies
- Brave: Settings → Shields → Cookies → Block all cookies / Block third-party cookies
You can choose to:
- Block all cookies (our key generation tool will still work)
- Block only third-party cookies (blocks analytics and ads, keeps functional preferences)
- Clear cookies regularly or after each browsing session
- Set exceptions for specific websites you trust
- View and delete individual cookies
Mobile Devices
iOS (iPhone/iPad):
- Settings → Safari → Block All Cookies or Prevent Cross-Site Tracking
- Settings → Privacy → Advertising → Limit Ad Tracking
Android:
- Chrome: Settings → Site settings → Cookies → Block third-party cookies
- Settings → Google → Ads → Opt out of Ads Personalization
Impact on Our Tool
Because we don't rely on cookies for core functionality, blocking cookies won't break our tool:
- ✅ Key generation still works: All key generation happens in your browser's JavaScript engine, no cookies involved
- ✅ Tool remains fully functional: You can use every feature without accepting any cookies
- ⚠️ Preferences won't save: Language selection and theme preferences will reset each visit
- ⚠️ Fonts may default: If you block Google Fonts, the site will use your system's default fonts
- ⚠️ No analytics: We won't see how you use the tool (which is fine—your choice matters more)
- ⚠️ Ads less relevant: You'll still see ads, but they won't be personalized to your interests
Do Not Track (DNT)
Some browsers offer a "Do Not Track" feature that sends a signal to websites requesting not to be tracked.
Our Response to DNT: While DNT is not legally binding, we respect privacy preferences. When combined with cookie blocking, DNT effectively limits tracking. However, third-party services like Google Analytics may not honor DNT signals unless you use their specific opt-out tools.
Global Privacy Control (GPC)
We honor Global Privacy Control (GPC) signals, especially for California residents under CCPA/CPRA:
- When GPC is enabled in your browser, we automatically disable personalized advertising
- We treat GPC as a valid opt-out request
- You can enable GPC in browsers like Firefox, Brave, and through browser extensions
Privacy Tools & Extensions
Feel free to use privacy-enhancing tools like:
- Ad blockers: uBlock Origin, AdBlock Plus, AdGuard
- Privacy extensions: Privacy Badger, Ghostery, Disconnect
- Cookie managers: Cookie AutoDelete, I don't care about cookies
- VPNs: Any VPN service for encrypted connections
- Privacy-focused browsers: Brave, DuckDuckGo, Firefox with tracking protection
- Private browsing modes: Incognito (Chrome), Private (Safari/Firefox)
Our tool works perfectly with all of these because we don't rely on invasive tracking technologies.
Legal Compliance
Different jurisdictions have different cookie laws. Here's how we comply:
GDPR & ePrivacy Directive (European Union)
The EU's General Data Protection Regulation (GDPR) and ePrivacy Directive (often called the "Cookie Law") require:
- Prior Consent: Websites must obtain consent before setting non-essential cookies
- Clear Information: Users must understand what cookies do and why they're used
- Easy Control: Users must be able to accept, reject, or customize cookie preferences
- Granular Choices: Users should be able to accept some cookie categories while rejecting others
Our Compliance:
- We display a cookie consent banner to EU/EEA/UK visitors before setting non-essential cookies
- We provide clear information about each cookie category
- We offer accept all, reject all, and customize options
- Essential cookies (language preference, consent storage) don't require consent under GDPR Article 6(1)(f)
- We only set analytics and advertising cookies after obtaining consent
CCPA & CPRA (California, USA)
The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) regulate data collection, including through cookies:
- Disclosure: Must disclose what personal information is collected via cookies
- Opt-Out Right: Must provide a way to opt out of the "sale" or "sharing" of personal information
- "Do Not Sell" Link: Must display a clear opt-out link
- GPC Support: Must honor Global Privacy Control signals
Our Compliance:
- We disclose all cookies in this policy and our Privacy Policy
- We provide a "Do Not Sell or Share My Personal Information" link for California residents
- We honor GPC signals from browsers
- While CCPA doesn't require prior consent, we still give users control over advertising cookies
UK GDPR & PECR (United Kingdom)
Post-Brexit, the UK maintains its own version of GDPR and Privacy and Electronic Communications Regulations (PECR):
- Similar requirements to EU GDPR and ePrivacy Directive
- Requires consent for non-essential cookies
- Must provide clear information and easy controls
Our Compliance: We treat UK visitors the same as EU/EEA visitors, displaying the consent banner and obtaining consent before setting non-essential cookies.
Other Jurisdictions
We also strive to comply with privacy laws in other regions:
- 🇨🇦 PIPEDA (Canada): Requires meaningful consent for personal data collection
- 🇦🇺 Privacy Act (Australia): Requires transparent data practices
- 🇧🇷 LGPD (Brazil): Similar to GDPR, requires consent for non-essential cookies
Why We Use Cookies
You might wonder: why do we use cookies at all? Here's our honest explanation:
Essential Cookies: Making the Site Work
Essential cookies remember basic things like your language preference and cookie consent choices. Without these, you'd have to set your preferences every single visit. They make the site more user-friendly without any privacy downsides.
Analytics Cookies: Understanding What Works
We use Google Analytics to understand how people use our tool:
- Which pages are most helpful?
- Where do users get confused or stuck?
- What browsers and devices do we need to support?
- How can we make the tool faster and better?
Analytics help us improve the tool for everyone. We don't use analytics data for advertising or sell it to third parties—it's purely for making the tool better.
Advertising Cookies: Keeping the Tool Free
Let's be honest: hosting, maintenance, and development aren't free. We have three options to fund this tool:
- Charge users a subscription fee
- Sell user data to third parties
- Display advertisements
We chose option 3 because it keeps the tool accessible to everyone while respecting your privacy. Yes, ads use cookies for personalization and measurement. But you can opt out of personalized ads while still using the tool for free.
What We Don't Do:
- We don't sell your browsing data to data brokers
- We don't create detailed personal profiles for sale
- We don't share your JWT keys (they never leave your browser anyway)
- We don't display ads that invade your privacy with aggressive tracking
Advertising keeps the tool free and accessible. We believe that's a fair trade, especially since you have complete control over personalization.
Changes to This Cookie Policy
We may update this Cookie Policy from time to time if:
- We add or remove cookies or tracking technologies
- We change advertising or analytics providers
- Cookie laws change and require different disclosures
- We add new features that use cookies
- We receive feedback that this policy needs clarification
How we'll notify you:
- We'll update the "Last Updated" date at the top of this page
- For significant changes (like adding new tracking technologies), we'll display a notice on our homepage for 30 days
- If legally required, we'll obtain new consent for material changes
We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies.
Questions About Cookies?
If you have questions about our cookie usage, want to report an issue, or need help managing cookies, please contact us:
Email: jwtsecretkeygenerator@gmail.com
Subject Line: "Cookie Policy Question"
Response Time: We typically respond within 24-48 hours
We're happy to explain our practices in more detail or help you understand how to control cookies in your browser.
In Conclusion
We use cookies for three reasons: to make the site work properly (essential cookies), to understand how to improve it (analytics cookies), and to keep it free for everyone (advertising cookies).
We believe in being honest about what we do and giving you control over your privacy. You can reject non-essential cookies and the tool will still work perfectly—because your JWT keys are generated entirely in your browser and don't depend on any server communication or cookies.
Your privacy matters more than our metrics. Your security matters more than our analytics. Your trust matters more than our advertising revenue.
That's not just our cookie policy—it's our promise.
— The JWT Secret Key Generator Team