Privacy Policy

1 Information We Collect and How We Store It

Our extension is designed with a "local-first" security architecture. We do not collect, transmit, or store your 2FA Secret Keys, generated TOTP codes, or any personal information on our external servers.

• Local Storage Only: All your 2FA accounts and secret keys are encrypted and stored exclusively on your local device using Google Chrome's native chrome.storage API.
• No Cloud Syncing by Us: We do not have access to your keys. If you uninstall the extension or clear your browser data without a backup, your keys will be deleted locally.

2 How We Use Permissions

To provide its core functionality, the extension requests the following minimum necessary permissions:

• storage: Used strictly to save your 2FA secret keys and preferences locally on your device.
• activeTab / scripting: Used solely to identify the current website you are logging into, allowing us to auto-fill the 2FA code or scan QR codes locally. We do not track your browsing history.

3 Data Sharing and Disclosure

We strictly adhere to the Chrome Web Store Developer Program Policies.

• We do not sell, trade, or transfer your data to outside parties.
• We do not use your data for unrelated purposes, creditworthiness determination, or lending purposes.

4 Third-Party Links

The extension may provide a link to our official website (2faotp.live) for support or manual web-based code generation. Using the web version is subject to the website's own privacy terms, but the extension itself remains fully isolated.