Roll privacy

On your device

• Passwords are made in your browser with its secure random number generator. They are never written to disk and there is no history. Only the password you saw last is kept in your browser's session memory (not synced, not readable by web pages, gone when you close the browser), so reopening Roll shows it again, marked as the same password, until you roll a new one.
• Your settings and presets (lengths, character sets, your preset names) are kept in your browser's sync storage, which your browser may sync to your other devices. They never contain a password.
• Roll has no server and no account. There is nothing about you on our side.

Only if you say yes

The first time you open Roll it asks “Help improve Roll?” (on Firefox you may already have answered when you installed it). Nothing is sent before you answer, and nothing at all if you choose “No thanks”. If you choose “Share anonymous stats”, Roll sends:

Usage counts (Umami)

Anonymous counts to Umami, tagged “roll-extension” and with which part of Roll they came from (the generator, Settings or the background). No cookies, no user or install id. Only these events, with only these details (Roll adds nothing else):

• The popup was opened: nothing else.
• A password was made: its type (random, passphrase, pronounceable, PIN or pattern), the preset (a built-in name, or just “custom” for your own), whether it came from the popup or the right-click menu, and whether it was a list.
• A password was copied: popup or right-click menu.
• A password was filled into a page: popup or right-click menu, and whether it worked.
• A breach check was run: never the result.
• A preset was created: never its name.
• A setting was changed: which one, never its value.
• You said yes to sharing: sent once, right after the yes.

Crash reports (Sentry)

When Roll itself breaks, an error report goes to Sentry (EU data region): the error message, where in Roll's code it happened, Roll's version, and your browser and operating system. Before anything is sent, Roll removes page addresses and extra data, and drops the whole report if it contains a password Roll made or anything that looks like one. There are no breadcrumbs, no screen recording and no session tracking, and Sentry is set not to store IP addresses.

As with any connection, Umami and Sentry see your IP address and your browser's user agent when Roll sends to them. Umami uses them, together with a salt that changes regularly, to tell your browser, operating system and device type, estimate an approximate location and count unique users, and doesn't store the IP address. Sentry reads your browser and operating system from them and is set not to store IP addresses. So neither Umami, Sentry nor we keep anything that could tell who you are, and neither can follow you to other sites.

Never sent

Passwords or parts of them, their length or exact settings, your preset names, your clipboard, the addresses or names of the sites you use, or anything you type (the breach check below, if you turn it on, sends only a short piece of a hash).

Breach check (off unless you turn it on)

In “Check a password” you can type a password to see how strong it is; that check runs on your device. If you turn on “Check passwords against known breaches” in Settings, you can also ask Have I Been Pwned's Pwned Passwords service whether the password appears in known data breaches. Roll never sends the password: it computes its SHA-1 hash on your device and sends only the first 5 of its 40 characters (shared by hundreds of other passwords). The service answers with every matching hash, padded with fake entries so the size of the answer says nothing, and Roll compares them on your device. Anonymous stats, if you said yes, only count that a check was run, never its result. Like any server, Pwned Passwords (run by Cloudflare for Have I Been Pwned) sees your IP address and browser when you run a check.

Enforced by the browser

Roll's content security policy lets it connect only to itself, to Umami and Sentry (only when they are set up in the build you install) and to Pwned Passwords for the optional breach check. The browser blocks every other connection, so Roll can't send data anywhere else even by mistake. It loads no code from the internet.

Permissions and why

• Storage: keeps your settings and presets (never a password) in your browser's sync storage.
• Context menu: adds “Generate password here” to the right-click menu of text fields.
• Active tab and scripting: when you choose that menu item, fills the field you clicked in that one tab. Roll has no access to any site otherwise and runs nothing on pages by itself.
• Technical and interaction data (Firefox, optional): asked only when you choose to share anonymous stats; this is how Firefox records your yes.

Roll doesn't ask for access to all websites, your tabs, your history, your clipboard or notifications. Copy works without a clipboard permission because you press it, and Roll never reads your clipboard.

Changing your answer

Open Roll, choose the menu in the top right, then Settings, and turn “Send anonymous usage and error reports” on or off. It takes effect right away. On Firefox you can also change it under Add-ons and themes, Roll, Permissions and data.

Who is responsible

Illia Veremiev, Denmark. For questions about your data, write to appbits.dev@outlook.dk.

Last changed: 10 October 2026.