OM Authenticator Privacy Policy
Last updated: August 8, 2026
OM Authenticator (TOTP) is a browser extension for generating and managing time-based one-time passwords (TOTP) for two-factor authentication.
Data handled by the extension
OM Authenticator may process authentication data such as TOTP secrets and generated one-time codes. It may also process account information entered by the user, such as service names, usernames, login names, or email addresses.
Local storage
Authenticator data is stored locally in the user's browser profile. TOTP secrets are stored in an encrypted local vault. The extension also stores local preferences, recovery state, and related application data required for its functionality.
Data transmission
OM Authenticator does not transmit TOTP secrets, generated codes, usernames, email addresses, vault contents, backups, or other authenticator data to OM Studio or to any remote server.
The extension does not use analytics, telemetry, advertising, tracking, remote code, or external services for processing authenticator data.
Browser data
The Chrome version of OM Authenticator does not access browsing history, search history, website content, or lists of frequently visited websites.
Backups
Users can create password-protected encrypted backup files. Backup files are created locally and are not uploaded or transmitted by OM Authenticator.
Data sharing and sale
OM Studio does not sell user data. OM Studio does not transfer user data to third parties except where required by applicable law.
User data is not used for advertising, creditworthiness assessment, lending, or purposes unrelated to the core functionality of OM Authenticator.
User control
Users can edit or delete authenticator entries from within the extension. Removing the extension or clearing its browser storage may remove locally stored data. Users are encouraged to maintain an encrypted backup if they want to be able to restore their authenticator entries.
Security model
The unlocked browser profile is treated as trusted. OM Authenticator does not provide a separate local master password for opening the extension's primary vault. Encrypted backups use a user-provided password.
Changes to this policy
This privacy policy may be updated if the functionality or data-handling practices of OM Authenticator change. The latest version will be published on this page.
Contact
For privacy or support inquiries regarding OM Authenticator, contact OM Studio using the publisher contact information provided on the Chrome Web Store listing.