Privacy Policy & Terms of Service

Information We Collect

We collect only the information necessary to provide our two-factor authentication services:

• Account Information: Email address, encrypted password, and optional profile information
• Authentication Data: Two-factor authentication secrets (encrypted), recovery codes, and login timestamps
• Security Logs: Login attempts, IP addresses (for security purposes), and device information
• Communication: Messages sent through our contact form

How We Use Your Information

• Provide and maintain our two-factor authentication services
• Secure your account and prevent unauthorized access
• Send important security notifications and service updates
• Respond to your support requests and communications
• Improve our security features and user experience
• Comply with legal obligations and protect against fraud

Data Security & Encryption

We implement industry-standard security measures:

• All sensitive data is encrypted using AES-256 encryption
• Passwords are hashed using bcrypt with salt
• 2FA secrets are encrypted and never stored in plain text
• Secure HTTPS connections for all data transmission
• Regular security audits and vulnerability assessments
• Limited access to data on a need-to-know basis

Data Sharing & Third Parties

We do not sell, trade, or rent your personal information. We may share data only in these limited circumstances:

• With your explicit consent
• To comply with legal requirements or court orders
• To protect our rights, safety, or the safety of others
• With trusted service providers who help us operate our platform (under strict confidentiality agreements)

Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a common format
• Withdrawal: Withdraw consent for data processing

Cookies & Tracking

We use minimal cookies and tracking technologies:

• Essential cookies for authentication and security
• Session cookies to maintain login state
• Security cookies to prevent CSRF attacks
• We do not use advertising or social media tracking pixels

Acceptance of Terms

By accessing and using My2FAApp, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service. If you do not agree with these terms, please discontinue use of our service immediately.

Service Description

My2FAApp provides two-factor authentication services including:

• Time-based One-Time Password (TOTP) generation and verification
• Recovery code generation and management
• Secure account management and authentication
• Security monitoring and notifications

User Responsibilities

As a user of our service, you agree to:

• Provide accurate and current information
• Maintain the security of your account credentials
• Keep your recovery codes in a secure location
• Notify us immediately of any unauthorized access
• Use the service in compliance with applicable laws
• Not attempt to circumvent our security measures
• Not use the service for any illegal or unauthorized purposes

Service Availability

While we strive to provide reliable service, we cannot guarantee:

• 100% uptime or uninterrupted service
• Error-free operation at all times
• Compatibility with all devices and software
• That our service will meet all your specific requirements

We reserve the right to modify, suspend, or discontinue our service with reasonable notice.

Limitation of Liability

To the maximum extent permitted by law:

• Our service is provided "as is" without warranties of any kind
• We are not liable for any indirect, incidental, or consequential damages
• Our total liability shall not exceed the amount paid for our services
• We are not responsible for data loss due to user error or device failure
• Users are responsible for maintaining their own backups of recovery codes

Account Termination

We may terminate or suspend your account if:

• You violate these terms of service
• You engage in fraudulent or illegal activities
• Your account remains inactive for an extended period
• We are required to do so by law

You may delete your account at any time through your account settings.

Intellectual Property

All content, features, and functionality of My2FAApp are owned by us and are protected by copyright, trademark, and other intellectual property laws. You may not reproduce, distribute, or create derivative works without our express permission.

Our Commitment

My2FAApp is committed to providing an accessible experience for all users. We strive to comply with the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards and other applicable accessibility standards.

Accessibility Features

Our platform includes the following accessibility features:

• Keyboard navigation support for all interactive elements
• Screen reader compatible markup and ARIA labels
• High contrast color schemes and dark mode support
• Scalable text and responsive design for various devices
• Alternative text for images and visual content
• Clear focus indicators and logical tab order
• Semantic HTML structure for better navigation

Ongoing Efforts

We continuously work to improve accessibility by:

• Regular accessibility audits and testing
• User feedback incorporation and testing
• Staff training on accessibility best practices
• Staying updated with the latest accessibility standards
• Working with accessibility experts and consultants

Feedback & Support

If you encounter any accessibility barriers while using our service, please contact us. We are committed to addressing accessibility issues promptly and will work with you to find suitable solutions.