INFORMATION PURSUANT TO ART 12 FF GDPR · AUGUST 2026
Translation. This page is a convenience translation of the German original. The statutory disclosure and information obligations are met by the German version, which is the only binding one. In case of any discrepancy the German text prevails.
This website does not process the content you enter.
Words, codes and characters you type into the tool never leave your browser. There is no transmission to a server, no interim storage and no logging of this content. All calculations run exclusively on your device. No cookies are set, no analytics services are used and no resources are loaded from third-party servers.
The tool on this website accepts words or character strings and converts them into an arrangement of tiles. This processing takes place entirely in the memory of your browser (client-side, in JavaScript). No processing by the controller within the meaning of the GDPR takes place, because the data never reaches the controller.
Closing or reloading the page discards this input. There is no recovery function — not even for the operator.
A word in our own cause. Even though nothing is transmitted technically: a browser on a device connected to the internet is not a safe environment for real key material. For real use, the offline version on a network-isolated computer is what is intended.
When the website is accessed, the hosting provider automatically records data in server log files which your browser transmits. This is technically unavoidable and concerns:
This website sets no cookies.
It uses your browser's local storage (localStorage) for at most two entries:
| Key | Content | Purpose | Duration |
|---|---|---|---|
| omegaseedphrase.hinweise.v1 | 1 | records that the opening notices have been read — only after explicit consent | until you clear your browser storage |
| omegaseedphrase.theme | light / dark | records the chosen appearance if you use the switch in the page header | until you clear your browser storage |
Neither entry contains personal data, an identifier or a timestamp. They are not transmitted to any server. If you never switch the appearance, the page follows your device's system setting and stores nothing for it.
All components of the website — fonts, images, program code and the BIP39 word list — are delivered from the same server as the page itself. In particular no Google Fonts, no content delivery networks, no analytics tools, no social media plugins, no map services and no ad networks are embedded. Accessing the page therefore creates no connections to further third parties beyond the hosting provider named in section 9.
The offline version offered for download is a single HTML file without network functions. After downloading, no communication with the provider takes place — neither update queries nor usage statistics. The file stores nothing, not even the acknowledgement of the notices.
If you write to us by e-mail, we process the data you provide (sender address, content, name where applicable) in order to handle your enquiry.
Never send a seed phrase by e-mail. We never ask for seed phrases, private keys or passwords. Any message that does is not from us.
The website is operated at DigitalOcean, LLC, 105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA. DigitalOcean processes exclusively the server log files described in section 4, as a processor under Art 28 GDPR; the data processing agreement is concluded upon acceptance of the terms of service.
As DigitalOcean is a company established in the United States, access from a third country cannot be entirely ruled out. The following safeguards under Chapter V GDPR apply:
Only connection data is affected (essentially the IP address). Input from the tool never reaches the server and therefore cannot be transferred.
The domain is registered with GoDaddy. Resolving the domain name sends queries to the name servers operated there. This generates technical connection data required to establish the connection. No access to website content or to your input takes place in the process.
Beyond this, personal data is disclosed only to authorities and courts where a statutory obligation exists. Data is not sold. There is no automated decision-making, including profiling, within the meaning of Art 22 GDPR.
Personal data is deleted as soon as the purpose of processing ceases to apply and no statutory retention obligations prevent deletion. The specific periods are stated with each processing activity above.
You have the following rights vis-à-vis the controller:
An informal message to the contact address above is sufficient to exercise these rights. We respond without undue delay, at the latest within one month.
Without prejudice to any other remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence or of the alleged infringement. In Austria:
Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at
We adapt this privacy policy when the legal situation or the actual operation of the website changes. The version available at the time of access applies. Status: August 2026.
