Privacy policy

The short version

The Otter app collects nothing, sends nothing and stores nothing outside your device. This website counts its visits, without cookies, as described below.

The app has no account, no server, no analytics and no crash reporting. There are no in-app purchases, so there is no payment processor either. The Android release does not even hold the permission required to use the network.

What stays on your device

The two-factor accounts you add (the service name, the account name, and the key used to generate codes) are stored in an encrypted database on your phone. So are your preferences. None of it is transmitted anywhere, and it is removed when you uninstall the app.

Permissions

Otter asks for three things, each only when it needs them.

• Camera: used only while you are scanning a setup QR code, to read the code in front of you. No image is recorded or stored.
• Biometrics: used only to ask the operating system to unlock the key that decrypts your accounts. Otter never receives your fingerprint or face data; it only learns whether the device accepted you.
• Files: used only when you export or import a backup, and only for the file you choose.

Backups

If you export a backup, the resulting file is yours. Where it goes afterwards is entirely up to you, and if you place it in a cloud service then that service’s privacy policy applies to it, not this one. The file is encrypted with a passphrase you choose and cannot be opened without it.

This website

These pages are static files, and they set no cookies. The appearance you choose on this site, and whether you let the measurement below count your visits, are kept in your own browser and never sent anywhere; the language you choose is part of the page address, which that measurement records. The hosting provider may keep standard server logs, which are outside our control and are not used to identify anyone.

Audience measurement

To know how many people visit and which pages they read, this site uses Umami, an open-source audience measurement tool, installed on a server run by the publisher and hosted by Scaleway in Paris. It sets no cookie and does not follow you onto other sites. Nothing it records is shared with or sold to anyone. Each page view records:

• The page you opened, its title, and the site that linked to it, if there was one.
• Your browser, operating system, type of device, screen size, and the language your browser is set to.
• An approximate location (country, region and city), worked out from your IP address. The address itself is not stored, and the server keeps no access log.
• An identifier computed from your IP address and your browser, which counts your visits as the same visitor until the end of the calendar month and changes at the start of the next.

Refusing the measurement

To stop being measured, use the button below. The choice is kept in this browser, which then sends nothing more to the measurement server and, from the next page on, does not even load the measurement script. Clearing this site’s data in your browser clears the choice with it, and the measurement starts again.

The measurement rests on the publisher’s legitimate interest in knowing whether the site is read (GDPR, Article 6(1)(f)). The statistics are kept with no set time limit. Your IP address is not among them.

Children

The Otter app is not directed at children and, since it collects nothing from anyone, it collects nothing from them either.

Your rights

Under the GDPR you have the right to access, correct and erase your personal data, and to object to its use. The app sends us none of it, so there is nothing for us to hand over, correct or delete: uninstalling the app removes everything Otter holds. The website’s statistics hold neither your name nor your IP address; your visits of the current month could only be found from your IP address and your exact browser together, so write to us with both if you want them looked up or deleted. To stop being measured, use the button described above. If you would like to ask about any of this anyway, write to otter@foohx.com.

You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Changes

If this policy ever changes, the date at the top of this page changes with it. Any change that would make the app collect data would also require a new app release, which you would have to install.