Privacy Policy

Last updated: February 11, 2026

This Privacy Policy describes how TinyOTP handles your information. The short version: we collect nothing. Your data never leaves your browser.

Our Privacy Commitment

TinyOTP operates with a strict zero-data-collection policy. We do NOT collect, store, or transmit your browsing history, OTP secrets, master password, IP address, or any personal information whatsoever.

How TinyOTP Works

When you use TinyOTP:

  • Your OTP secrets are stored exclusively in chrome.storage.local within your browser
  • TOTP codes are generated locally using the standard HMAC-SHA1 algorithm
  • If you enable a master password, secrets are encrypted with AES before storage
  • No data is ever sent to any remote server

Information We Collect

TinyOTP collects absolutely no personal data, usage analytics, or telemetry. The extension does not include any third-party analytics, tracking scripts, or data collection mechanisms.

The only data that exists is what you manually enter (account names, secret keys), and it is stored locally in your browser only.

Data Storage

All data is stored locally using the Chrome Extension Storage API:

  • OTP account information (names, issuers, secret keys)
  • Encrypted master password hash (if password protection is enabled)
  • Extension preferences

This data never leaves your device. When you uninstall the extension, all locally stored data is automatically deleted by the browser.

Third-Party Services

TinyOTP does not integrate with, connect to, or share data with any third-party services. There are no external API calls, no analytics platforms, and no advertising networks.

Data Retention

Since we do not collect any data, there is no data to retain. Your locally stored secrets exist only on your device and are removed when you uninstall the extension or clear your browser data.

Children's Privacy

TinyOTP does not knowingly collect information from anyone under the age of 13. The extension does not collect any personal information from any user regardless of age.

Your Rights

Since we do not collect personal data, there is no user data to access, modify, or delete. You have the right to:

  • Use TinyOTP without providing any personal information
  • Uninstall the extension at any time, which removes all local data
  • Clear your local settings through your browser
  • Contact us with privacy-related questions

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: privacy@tinyotp.com

TinyOTP is committed to your privacy. Your authentication secrets never leave your device, and we have zero ability to access your data.