Legal

Cookie policy

How browser storage and advertising technologies are used across the 2FAOTP content site and isolated authenticator.

Effective date: 25 July 2026

Authenticator

The authenticator does not deliberately store your secret, generated code, algorithm, or digit settings in cookies, local storage, session storage, or IndexedDB. Theme preferences may be added in a future release only if they can remain separate from secret material.

Content website

The public content website may use essential storage for consent choices and security functionality. Once advertising is enabled, Google and its partners may read or write cookies and similar identifiers for ad delivery, measurement, fraud prevention, frequency control, and—where permitted— personalisation.

Consent management

Visitors in regions that require consent will be shown a compatible consent-management message. Choices can be changed through the privacy controls made available on the production site. Rejecting optional storage should not prevent access to articles or the authenticator.

Your controls

Browser settings can block or delete cookies. Google also provides advertising controls through its Ads Settings. Blocking optional technologies may change ad relevance or measurement but should not prevent the core content from loading.