1. Overview

2FA Fast ("we", "us", "our") operates the website at https://2fafast.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

The short version: Your 2FA secret keys are never sent to our servers. All code generation happens in your browser.

2. Information We Do NOT Collect

We do not collect, store, or transmit:

  • Your 2FA secret keys
  • The codes you generate
  • Account names or labels you enter into the generator
  • Data stored in your browser's localStorage (this never leaves your device)

3. Information We Do Collect

3a. Server Logs

Like all web servers, our server automatically records standard access logs including your IP address, browser type, referring URL, and pages visited. These logs are retained for up to 30 days for security and debugging purposes only.

3b. Google Analytics

We use Google Analytics (GA4) to understand how visitors use our site. GA4 collects anonymous usage data including page views, session duration, and device type. This data is aggregated and does not identify you personally. You can opt out using the Google Analytics Opt-out Add-on.

3c. Google AdSense

We display advertisements from Google AdSense. Google may use cookies to show relevant ads based on your interests. See Google's Privacy Policy for details. You can manage ad personalization at adssettings.google.com.

4. Cookies

We use the following cookies:

  • Theme preference: A localStorage entry (2ff_theme) stores your light/dark mode preference.
  • Account history: A localStorage entry (2fafast_accounts_v1) stores saved accounts if you use the Save feature. This data is local to your browser only.
  • Google Analytics cookies: Set by Google for traffic analysis.
  • Google AdSense cookies: Set by Google for advertisement personalization.

We do not set our own tracking cookies.

5. Data Security

All traffic is encrypted via HTTPS/TLS. Your 2FA secret keys are processed using the browser's native Web Crypto API and never transmitted over the network.

6. Third-Party Services

  • Google Fonts: Loads the Inter typeface. Google may log your IP.
  • Google Analytics: Anonymous usage statistics.
  • Google AdSense: Advertisement serving.
  • Cloudflare: DNS and DDoS protection for our domain.

7. Children's Privacy

2FA Fast is not directed at children under 13. We do not knowingly collect personal information from children.

8. Your Rights

Since we do not collect personally identifiable information beyond server logs, there is minimal data to request. You may contact us at contact@2fafast.com with any privacy inquiries.

9. Changes to This Policy

We may update this Privacy Policy. Changes will be posted on this page with an updated date.

10. Contact

For privacy concerns, contact us at: contact@2fafast.com