1. Introduction

Welcome to 2FA Live Authenticator ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your information. This Privacy Policy explains how we handle data when you use our free online TOTP (Time-based One-Time Password) generator tool.

Critical Statement: Our tool operates entirely in your web browser. We do not collect, store, or transmit any personal data, secret keys, or generated codes to our servers. All processing happens locally on your device.

2. Information We Collect

We do not collect any of the following:

• Your Base32 secret keys
• Generated TOTP codes
• Account names or identifiers
• Personal identification information
• Email addresses
• Browsing history on our site
• Device fingerprints or identifiers

The only technical information that may be automatically logged by your web host or CDN (Content Delivery Network) includes:

• Your IP address (for basic CDN functionality)
• Browser type and version
• Operating system
• Date and time of access
• Referring website (if any)

This information is typical server log data and is not associated with your usage of the TOTP generator functionality.

3. How Your Data Is Used

Since we do not collect or store your authentication data:

• No data transmission: Your secret keys remain on your device
• No server-side storage: No databases contain your authentication information
• No cookies for tracking: We do not use session cookies or tracking cookies
• No data sharing: We have nothing to share with third parties

4. Technical Architecture

Our tool uses the following client-side technologies:

• JavaScript: For all TOTP code generation logic
• Web Crypto API: For HMAC-SHA1 cryptographic operations
• HTML5: For the user interface structure
• CSS3: For styling and presentation

All of these technologies run exclusively in your web browser. No backend processing occurs for the core authentication functionality.

5. Third-Party Services

We may use the following third-party services:

Hosting Provider

Your website is hosted by a third-party hosting provider. They may collect basic server logs as described above, but they do not have access to your TOTP secrets or codes.

External Links

Our site may contain links to external resources (such as RFC documentation, official service pages, etc.). We are not responsible for the privacy practices of those external sites. Please review their privacy policies independently.

6. Cookies

We do not use:

• Session cookies
• Persistent cookies
• Tracking cookies
• Advertising cookies
• Analytics cookies

Your browser may cache our static files (JavaScript, CSS, HTML) for performance purposes. This is standard browser behavior and does not involve cookies.

7. Data Security

While we cannot control the security of your own device, we implement the following measures:

• HTTPS encryption: All communication with our site is encrypted via TLS/SSL
• Client-side processing: Eliminates server-side data exposure risks
• No database storage: Removes risk of data breaches containing user secrets

Your Responsibility: Ensure your device has up-to-date antivirus software, a secure operating system, and a trusted web browser to minimize local security risks.

8. Children's Privacy

Our service is intended for general audiences. We do not knowingly collect personal information from children under 13 years of age. If you believe we have received information from a child, please contact us and we will take steps to delete such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The updated version will indicate a revised "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our practices, please contact us at:

Email: privacy@2fa-live.com
Address: [Your Business Address]

We will respond to inquiries within 30 business days.

11. Compliance Statements

This tool is designed to comply with:

• GDPR: As a data processor that collects minimal data, we meet GDPR requirements through our client-only architecture
• CCPA: California residents have the right to know what data is collected - which we disclose above as minimal technical logs
• RFC 6238: Our TOTP implementation follows the IETF standard specification

12. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Right to access: Request a copy of any personal data we hold
• Right to deletion: Request deletion of any personal data we hold
• Right to rectification: Request correction of inaccurate data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format

To exercise these rights, contact us using the information in Section 10.