# WinOTP Reborn WebBridge Privacy Policy

Effective date: October 14, 2026

WinOTP Reborn WebBridge is a browser extension and local Native Messaging bridge for the
WinOTP Reborn desktop application. This policy applies to the Chrome/Chromium and Firefox
versions of the extension and to the `winotp-browser-bridge` native host.

## Data processed by the extension

When you open the extension, it communicates with the WinOTP Reborn desktop application on
the same device. It may temporarily receive:

- account identifiers, issuers, and account names; and
- a one-time password, its remaining lifetime, and its period, only after you explicitly
  request the code for an account.

This information is used only to display your WinOTP accounts and the one-time password you
requested. The extension does not receive OTP seeds, `otpauth://` URIs, backup data,
encryption keys, database contents, or WinOTP protection credentials.

When you explicitly choose to scan a QR, the extension temporarily processes a screenshot of
the visible browser tab after you select an area using an overlay on the webpage. It decodes only the rectangle
you manually select and confirm, using bundled code, and forwards only the scanned
authenticator URI to WinOTP for import review. Local image import is not supported. Such URIs
can contain account secrets. Images and decoded text are held only in memory and are not
saved, logged, uploaded, copied to the clipboard, or returned from WinOTP to the browser.

## Local processing and retention

All communication takes place locally between the browser extension, the Native Messaging
host, and the WinOTP Reborn desktop application. The extension does not send account data or
one-time passwords to the developer or to any remote service.

Account details and one-time passwords are kept only in memory while needed by the extension.
They are not written to browser storage. A displayed password is removed when it expires or
when the popup is closed. If you choose to copy a password, it is written to the operating
system clipboard and remains subject to your operating system and clipboard-manager settings.

## Data not collected

The extension does not:

- automatically inspect or modify websites, read browser history or inspect network traffic;
- collect telemetry, analytics, diagnostics, advertising identifiers, or usage statistics;
- use cookies or tracking technologies;
- load remote code or contact a developer-operated service; or
- sell, share, or transfer user data to third parties.

The extension has no persistent host permissions or automatically running content scripts.
It uses `nativeMessaging` to communicate with the locally installed WinOTP Reborn bridge,
`activeTab` for the explicitly requested page capture, and `scripting` to inject its bundled
selection overlay on that page. The overlay does not inspect page content. Page code cannot
request account lists or OTP codes through the overlay. The extension does not request camera access.

## Store and browser services

Google, Mozilla, browser vendors, and extension stores may independently process installation,
update, review, or aggregate store-usage information under their own privacy policies. That
processing is not performed by WinOTP Reborn WebBridge and is not accessible through the
extension.

## Security and limited use

The extension validates the data exchanged with the local bridge and accepts only the fields
needed for its user-facing purpose. Use of information received from browser APIs adheres to
the Chrome Web Store User Data Policy, including its Limited Use requirements.

## Changes to this policy

Material changes to this policy will be published in this repository and reflected in the
extension-store disclosures before a release with different data practices is published.

## Contact

Questions or privacy concerns can be submitted through the public issue tracker:

https://github.com/xBounceIT/WinOTP-Reborn-WebBridge/issues