Legal & Safety Hub
FrankPass was built on radical transparency. These policies are written in plain language — no legal jargon designed to confuse.
Last updated: April 2026 · FrankPass / FrankBase Digital · Built by Master Manikant Yadav
1. Privacy Policy — Zero-Data Promise
You cannot leak what you do not have.
FrankPass is a truly stateless application. Our privacy policy is simple because our data collection is zero.
- No Databases: We do not maintain a user database. We do not store your name, email address, IP address, Secret Key, or any generated passwords — because we never receive them.
- On-Device Cryptography: All password generation happens locally inside your browser using the Web Cryptography API. The mathematical operation executes in your device's RAM and is cleared within 15 seconds of generation, or when you close the tab.
- No Trackers: We do not use third-party analytics trackers, retargeting pixels, or advertising networks on the core generator.
- Local Storage Only: If you choose to save settings (e.g., platform preferences), that data is saved locally on your device via browser storage — not on our servers. You control it, and you can clear it at any time through your browser settings.
- Payment Data: Pro plan payments are processed by our third-party payment processor (Dodo Payments). FrankPass never sees or stores your card details. Refer to Dodo's privacy policy for their data handling practices.
2. Terms of Service
The Rules of the Math
By using FrankPass, you agree to the following terms:
- The Tool is Free to Use: The FrankPass core web generator is provided entirely free of charge, with no account required. This will not change.
- Secret Key Responsibility: FrankPass cannot reset your Secret Key because we do not know what it is — ever. If you forget your Secret Key, you will generate different passwords and lose access to previously set accounts. You are solely responsible for choosing, remembering, and protecting your Secret Key.
- Fair Use: The generator is provided for personal and professional security use. You may not attempt to reverse-engineer the FrankPass algorithm, scrape or automate requests to the site, or use FrankPass for any malicious, fraudulent, or unlawful purpose.
- Intellectual Property: FrankPass is the intellectual property of Master Manikant Yadav. Personal use is permitted. Redistribution, republishing, or commercial resale under a different name is strictly prohibited without written permission.
- Modifications: We reserve the right to update these terms at any time. Continued use of FrankPass after any changes constitutes acceptance of the updated terms.
3. Legal Disclaimer & Limitation of Liability
Security is a Shared Responsibility
- No Guarantee of Absolute Security: While FrankPass generates mathematically strong passwords using industry-standard cryptographic primitives (PBKDF2 with HMAC-SHA512, 1,000,000 iterations), no security system is 100% impenetrable. Human error — such as disclosing your Secret Key in a phishing attack, using a weak Secret Key, or operating on a compromised device — is outside our control and responsibility.
- Limitation of Liability: Under no circumstances shall FrankPass, its founder Master Manikant Yadav, or FrankBase Digital be held liable for any data breaches, financial losses, account lockouts, or unauthorized access to your personal accounts arising from use of this tool. You use FrankPass as a mathematical utility, at your own discretion and risk.
- Educational Content: The ebooks, masterclasses, and written guides provided by FrankPass are for educational purposes only, to help you build stronger digital security habits. They do not constitute formal legal advice, IT enterprise consulting, or professional security certification.
- "As-Is" Service: FrankPass is provided "as is" without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.
4. Payments & Refund Policy
All Sales Final on Digital Products
Because FrankPass Pro licence keys and digital products (ebooks, guides, masterclasses) are delivered immediately and contain proprietary content that becomes accessible upon delivery, all sales are final. We do not offer refunds once a licence key has been issued or a digital product has been accessed or downloaded.
Technical Issues: If you experience a technical problem receiving your licence key or digital product, contact us immediately via X @iamfrankpass or r/FrankPass. Our support team will manually deliver your purchase.
Payment Processing: Payments are processed by Dodo Payments. FrankPass does not store, process, or have access to your payment card details at any time.
Chargebacks: Initiating a fraudulent chargeback for a product you have accessed constitutes fraud. We will dispute all fraudulent chargebacks with full documentation.
5. Affiliate Terms & Extension Licence
Partnering with FrankPass
Affiliate Programme: If you join our Affiliate Programme, you agree to represent FrankPass honestly and accurately. You may not make false claims (e.g., "FrankPass stops all viruses" or "FrankPass is certified by [unverified body]"), run deceptive advertisements, or engage in spam marketing. Affiliate payouts are processed according to the timeline specified in your partner dashboard. We reserve the right to terminate affiliate partnerships for violations of these terms or for conduct inconsistent with FrankPass's values.
Extension Licence: A FrankPass Pro licence key is issued for personal use. Each licence key activates the extension on up to the number of devices specified by your plan tier. You may not share, resell, or distribute your licence key. Platinum plan holders may use their licence across the specified number of profiles for family or team use as outlined in the plan description. Misuse of a licence key results in immediate revocation without refund.
6. Security Architecture & Scope
What FrankPass Protects — and What It Doesn't
What FrankPass secures: The password generation and storage layer. By storing nothing, we eliminate the most common attack vector — server-side breaches. FrankPass uses PBKDF2 with HMAC-SHA512 at 1,000,000 iterations, running exclusively via the browser-native Web Cryptography API. These are NIST-approved, industry-standard cryptographic primitives. No custom or proprietary cryptography is used.
What FrankPass cannot protect against: Keyloggers or malware on your local device; phishing attacks where you voluntarily enter your Secret Key on a fake website; shoulder surfing; a weak or guessable Secret Key; browser extensions with malicious permissions; or any attack that occurs after you copy and paste your generated password.
Responsible Disclosure: If you discover a security vulnerability in FrankPass, please report it responsibly via direct message to @iamfrankpass on X before making any public disclosure. We take security reports seriously and will respond promptly.
Want to understand the cryptographic details in full? Read the Security Model chapter in our documentation →