100% client-side
The ReKey recovery code generator is a static website with a small JavaScript file. When you click Generate, your browser creates the codes locally using crypto.getRandomValues(). No request is sent to any server, no code list is uploaded, stored or logged anywhere. We could not see your generated codes even if we wanted to — they exist only in your browser tab's memory until you close it.
What we do not collect
- No accounts. There is no sign-up, sign-in or user profile.
- No cookies. The site sets no cookies of its own and uses no cookie-based tracking.
- No analytics. We run no analytics scripts, fingerprinting or behavioral tracking.
- No generated data. The codes you generate, copy or download never leave your device.
Third-party resources
The site loads fonts from Google Fonts. When your browser fetches those font files, Google receives a standard web request (your IP address and the font URL), governed by Google's own privacy policy. No other third-party scripts, frames or trackers are embedded on any page.
Downloads
The Download .txt button creates the text file directly in your browser and saves it to your device. Nothing is transmitted in the process.
Children
This is a general-purpose utility site with no age-gated content and no data collection of any kind.
Changes to this policy
If this policy ever changes, the updated version will be posted on this page. Given the site's architecture — static files, no backend — there is deliberately very little here that could change.
Remember: codes from this generator are random strings for practice, testing and documentation. They are not tied to any account and must never be used as real account recovery codes.