Privacy Policy

Your privacy is fundamental to this tool. This page explains exactly what data we handle and — more importantly — what we don't.

What We Don't Collect

This tool is designed around a simple principle: your data never leaves your browser. We do not collect, transmit, or store:

Secret keys — never transmitted to any server; processed entirely in your browser via the Web Crypto API
Generated codes — computed locally and displayed only to you
QR code contents — decoded and parsed in your browser, never uploaded
Usage patterns or analytics — no Google Analytics, no tracking pixels, no fingerprinting, no telemetry of any kind
Personal information — no accounts, no sign-ups, no email collection

How the Tool Works

The 2FA code generator is built on client-side JavaScript and the Web Crypto API — a cryptographic interface built directly into modern browsers. When you enter a secret key and generate a code, the entire computation happens in your browser's memory.

There are no server round-trips involved in code generation. After the initial page load, the tool makes zero network requests. You can verify this yourself by opening your browser's Developer Tools → Network tab and watching for activity while generating codes. You will see none.

What Your Browser Handles Locally

Theme preference — your choice of light or dark mode is saved in localStorage so it persists between visits. This is optional and contains no sensitive information. You can clear it at any time through your browser settings.
That's it. No cookies are set. No session storage is used for secrets. No databases are created. Your secret key is held only in browser memory and is discarded when you close the tab or click Clear.

Third-Party Services

None. This tool loads no external resources of any kind:

No third-party CDNs
No external scripts or libraries loaded from other servers
No web fonts loaded from external services
No analytics or tracking services
No advertising networks
No social media widgets or share buttons

Every resource the tool needs is bundled with the page itself. This means no third party can track your use of this tool, and the tool continues to function with no internet connection after the initial page load.

Data Retention

There is nothing to retain. Secret keys exist only in your browser's working memory during active use. They are not written to disk, not saved to any database, and not transmitted to any server. When you close the tab or click Clear, the data is gone.

The only persistent data is your theme preference (light or dark mode), stored in your browser's localStorage. This can be cleared at any time through your browser settings or by using your browser's "Clear site data" function.

Open Source Verification

You don't have to take our word for any of this. The tool is designed so you can verify its privacy claims yourself:

Inspect the source code — open Developer Tools → Sources to read every line of JavaScript that runs
Monitor the network tab — confirm that zero requests are made after the page loads
Check localStorage — Developer Tools → Application → Local Storage shows only the theme preference
Use it offline — disconnect from the internet after loading the page to prove no server contact is needed

Contact

Questions about our privacy practices? Get in touch.

Last updated: September 2024