Trust center

Data handling

Generator sessions run in your browser. Names you generate are not transmitted to our servers unless you explicitly save them to an account. Account data is stored in encrypted form in a managed Postgres database with row-level security enforced per user.

We collect minimal analytics — page views, generator usage counts, and conversion events — to operate and improve the product. Analytics are aggregated; we do not build cross-site advertising profiles.

Security practices

• All traffic served over HTTPS with HSTS enabled.
• Authentication powered by a managed identity provider with secure password storage and optional social sign-in.
• Secrets stored in a dedicated secret manager, never in source control.
• Edge functions and APIs scoped with least-privilege keys.
• Routine dependency scanning and review of high-severity advisories.

Operational reliability

The site is deployed on a globally distributed edge runtime. Static assets are cached at the edge; dynamic functions run in regional workers. We aim for 99.9% monthly availability and publish material incidents in the editorial changelog.

Reporting a security issue

Email security@namegeneratortools.com with reproduction steps. We acknowledge reports within two business days and prioritise based on severity. We do not pursue researchers acting in good faith.