Privacy Policy
Our Commitment to Privacy
Private Authenticator is designed with privacy as a fundamental principle. We believe your authentication data should remain completely private and under your control.
Data Collection and Storage
What we collect: Nothing. We collect zero personal data.
What you store: All your 2FA secrets and settings are stored locally on your device using encrypted browser storage (IndexedDB).
No servers: We do not operate any servers that store or process your data.
Local-Only Operation
- All data processing happens entirely on your device
- No network requests are made to external servers
- Your 2FA codes never leave your device
- No analytics, tracking, or telemetry
Encryption and Security
Your data is protected by:
- AES-256-GCM encryption for all stored data
- PBKDF2 key derivation with 100,000 iterations
- Unique encryption keys derived from your master password
- Each entry encrypted individually with unique salts and IVs
Third-Party Services
We do not integrate with any third-party services, analytics platforms, or advertising networks. The application operates completely offline after the initial download.
Data Access and Control
Who can access your data: Only you, with your master password.
Data portability: You can export your data at any time using our encrypted backup feature.
Data deletion: You can delete all data by clearing your browser storage or uninstalling the application.
Browser Permissions
The application may request the following browser permissions:
- Camera: For QR code scanning (optional, only when you choose to scan)
- Clipboard: For copying 2FA codes (temporary access only)
- Local Storage: For encrypted data storage on your device
Changes to This Policy
Any changes to this privacy policy will be reflected in updated versions of the application. Since we don't collect any data, changes would primarily relate to new features or clarifications.
Contact Us
If you have questions about this privacy policy or our privacy practices, please contact us at [email protected].
Last updated: 10/15/2026