Hash It Out stores only:
- User preferences: password length, character set toggles, theme, auto-close setting.
- Domain history: which site domains have been used (domain name and timestamp only).

Hash It Out does not store, transmit, or log:
- Your master phrase
- Any generated passwords
- Browsing history beyond the domain-seen list above

Storage and Control
- All data is kept in browser.storage.local, encrypted at rest by the browser profile. No data is sent to any server. The extension makes zero network requests.
- All stored data can be wiped at any time via "Advanced Settings > Reset Extension Data".
- The clipboard is automatically cleared 30 seconds after a password is copied.

Third Parties
- Hash It Out has no third-party dependencies, analytics, telemetry, or advertising.