Privacy Policy

1. Contact and responsibility

For privacy, legal, or data-rights questions, contact the site operator at [email protected]. RandomIBAN is an independently operated project and does not publish a postal address.

2. IBAN generator, validator, and local storage

IBAN generation and MOD-97 validation run in your browser. The tool does not submit generated or pasted IBAN values to RandomIBAN, and those values are not included in the analytics event payloads implemented by this site. Generated values may appear in the page URL fragment and may be saved in your browser's local storage as recent history. URL fragments are not sent in normal HTTP requests, but anyone who can access your browser or a shared URL may be able to see them.

You can remove local history, theme, and language preferences by clearing site data in your browser. Do not paste real customer banking data into a public website when your organisation's policies prohibit it.

3. Technical data and security logs

The hosting and content-delivery providers used to serve the site may receive standard request data such as IP address, timestamp, requested URL, referrer, browser or device information, and security signals. These records are used to deliver the site, diagnose errors, prevent abuse, and maintain security. Images or flags loaded from a separate CDN can cause that provider to receive a similar request.

4. Google Analytics and Tag Manager

RandomIBAN uses Google Tag Manager and Google Analytics 4 to measure aggregate page and tool usage. Events can include the page, tool name, selected country, action, export format, quantity, and the host of a clicked related tool. They are deliberately allowlisted so an IBAN value or arbitrary form input is not sent as an analytics parameter. Google may still receive technical request data such as IP address, browser information, and consent state.

Google storage consent defaults to denied in the site code. Depending on your location and choices, Google may receive limited cookieless measurement signals even when storage is denied. Learn more in Google's Privacy Policy.

5. Google AdSense and advertising

Substantive, indexable generator, validator, and article pages may load the Google AdSense code. RandomIBAN does not load that advertising script on the privacy policy, terms, contact page, HTML sitemap, cheatsheets marked noindex, or localized country variants marked noindex. Google may process device identifiers, IP address, approximate location, ad interactions, consent signals, and cookies or similar storage to deliver, limit, measure, and protect advertising.

In the EEA, United Kingdom, and Switzerland, personalised advertising requires a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. Advertising and analytics storage remain denied by default until an applicable consent signal updates them. The AdSense account's certified Privacy & messaging CMP must be enabled before personalised ads are served in those regions. Where Google's message is active, its “Privacy and cookie settings” control lets you revisit your choice.

See how Google uses information from sites that use its services and Google My Ad Center.

6. Contact messages

The contact form builds a mailto: link and opens your email application; it does not submit the message to a RandomIBAN web endpoint. Your email provider and the recipient's provider process the name, address, message, and metadata you choose to send under their own terms.

7. Sharing, sale, and international processing

The site operator does not sell personal information. Data may be processed by hosting, security, CDN, analytics, advertising, and email providers to provide their services, comply with law, or protect users and the site. Those providers may process data outside your country using the safeguards they describe in their privacy documentation.

8. Retention

Browser history remains on your device until you clear it. Server and security logs are retained only as long as reasonably required for delivery, troubleshooting, abuse prevention, and legal obligations. Google and email providers apply their own retention settings and policies. RandomIBAN does not claim a shorter retention period where it cannot control a provider's systems.

9. Your choices and rights

You can block or clear browser storage, use browser tracking protection, decline consent where a consent message is shown, or stop using the site. Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal data, and to complain to a supervisory authority. Email [email protected] to make a request concerning data controlled by the site operator.

10. Children and policy changes

RandomIBAN is a developer and QA utility and is not directed to children. This policy may be updated when the site, providers, or legal requirements change. The effective date above identifies the current version.