Privacy Policy

No Data Collection

The extension does not collect any personal information, usage data, analytics, or telemetry. We do not track your activity or create user profiles.

Local Storage Only

All account data (names and TOTP secrets) is stored exclusively on your device using chrome.storage.local. Data never leaves your browser.

No Network Requests

The extension makes zero network requests. TOTP codes are generated entirely locally using the Web Crypto API. No internet connection is required.

Usage Analytics (Anonymous, Opt-Out)

The extension sends anonymous, aggregated event counts (e.g. popup_opened, code_copied, account_added) to Google Analytics 4 via Measurement Protocol. Identification uses only a random UUID generated on-device. Never transmitted: account names, secret keys, TOTP codes, website hostnames, clipboard contents. Disable in Settings → Privacy. The 2fa.fb.tools website also uses GA4 for basic visit metrics.

Permissions Used

• storage — storage — to save your 2FA accounts locally on device
• clipboardWrite — clipboardWrite — to copy generated TOTP codes to clipboard on click
• activeTab — activeTab — to capture a screenshot of the active tab when scanning a QR code (only when you click the "Scan QR" button)

Limited Use Compliance

The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Contact

For privacy-related inquiries, contact us at [email protected]