Password generation is being done using crypto.getRandomValues JavaScript method in the browser itself. Your information is NOT being transferred from/to our servers. Every step of the process is being done in the browser itself. This way the privacy of your data is implicitly being guaranteed, as it doesn’t leave your computer at any point.