Privacy Policy

Overview

2FAA Authenticator is a Chrome extension that generates TOTP (Time-based One-Time Password) codes for two-factor authentication. The extension is designed with privacy as a core principle: all data stays on your device, and nothing is sent to any external server.

Data Collection

We do not collect any data. The 2FAA Authenticator extension does not collect, transmit, or share any personal information, usage data, or analytics. There are no user accounts, no registration, and no sign-in required.

Data Storage

All data, including your TOTP secret keys and settings, is stored locally in your browser using chrome.storage.local. This data never leaves your device. If you uninstall the extension, all locally stored data is automatically removed by Chrome.

Permissions

The extension requests the following Chrome permissions, each used for a specific purpose:

• storage — Used to save your TOTP secrets and extension settings locally in the browser. No data is synced or uploaded.
• activeTab — Used to interact with the current tab when you explicitly invoke the extension, enabling auto-fill of 2FA codes into login forms.
• clipboardWrite — Used to copy generated TOTP codes to your clipboard when you click the copy button.

Content Scripts

The extension runs content scripts on web pages to detect 2FA input fields and enable auto-fill functionality. These scripts only look for specific input field patterns on the page. No page content, form data, browsing history, or any other information is collected, stored, or transmitted.

Analytics and Tracking

The extension contains no analytics, telemetry, or tracking of any kind. There are no third-party SDKs, no crash reporting, and no usage statistics collection.

Third-Party Services

The extension does not communicate with any third-party services or APIs. It is 100% client-side. All TOTP code generation is performed locally using standard cryptographic algorithms.

Changes to This Policy

If this privacy policy is updated, the changes will be posted on this page. The extension will remain committed to the principle of zero data collection.

Contact

If you have questions about this privacy policy, contact us at [email protected].