0fa.site
Home / Legal / Cookie Policy
Zero Tracking Cookies

Cookie & Local Storage Policy

0fa.site believes in transparency. We do not use third-party tracking cookies or advertising pixels. This policy outlines how we utilize strictly necessary browser storage to power our client-side cryptographic functions.

Effective Date: October 24, 2026 • EU ePrivacy & GDPR Compliant • Version 1.8

1. What is Web Storage & Cookies?

Cookies and Web Storage (such as HTML5 localStorage and sessionStorage) are standard browser technologies that allow web applications to store small pieces of textual data directly on your device.

Unlike traditional tracking cookies that are sent back to remote ad networks with every HTTP request, Web Storage remains strictly sandboxed within your local browser origin (https://0fa.site) and is never transmitted automatically across domain boundaries.

2. Our Zero-Tracking Guarantee

🍪

We Do NOT Use Marketing or Tracking Cookies

0fa.site does not load Google Analytics, Facebook Pixel, TikTok Pixel, DoubleClick, Criteo, or any third-party behavioral profiling scripts. You will never be retargeted or tracked across the web by using our service.

All cookies and storage items used on 0fa.site fall strictly under the category of "Strictly Necessary / Functional" under the EU ePrivacy Directive (Article 5(3)) and GDPR, as they are technically indispensable for delivering the service requested by the user.

3. Complete Inventory of Storage Keys

The following table lists every storage key utilized across the 0fa.site domain:

Technology Key Name Type Description Lifespan
localStorage 0fa_cookie_consent Essential Records your acknowledgment of this privacy and storage policy 1 Year
localStorage 0fa_admin_token Essential Encrypted session token allowing merchants to access the Admin Studio 7 Days
localStorage 0fa_admin_pin Essential Local credential for authorizing authenticated link generation requests Manual Lock
sessionStorage 0fa_active_secret Functional Temporarily preserves the active TOTP secret across page refreshes Tab Session

4. Ephemeral Session Storage & Memory Security

To prevent accidental credential loss when you refresh your browser window, 0fa.site temporarily retains your active 2FA secret in sessionStorage.

Key security attributes of our session handling:

  • Automatic Incineration: The moment you close your browser tab or window, the operating system instantly purges the sessionStorage memory allocation.
  • Origin Isolation: No external script or cross-origin iframe can access data stored within the 0fa.site origin.
  • URL Hash Scrubbing: Once a hash link (e.g. #t=SECRET) is processed, the application replaces the address bar with / using history.replaceState, preventing browser history leaks.

5. How to Manage or Clear Browser Storage

You have full control over your local device storage. You can inspect, modify, or erase all 0fa.site data at any time:

  • Google Chrome & Chromium Browsers: Press F12 → Go to Application tab → Under Storage, select Local storage and click Clear All.
  • Mozilla Firefox: Press F12 → Go to Storage tab → Right-click https://0fa.site → Select Delete All.
  • Apple Safari: Open Preferences → Privacy → Manage Website Data → Search for 0fa.site and click Remove.

6. Reset Your Local Preferences

Click the button below to instantly clear your local cookie consent flag and re-open the consent dialog:

7. Questions & Contact Information

If you have any questions or feedback regarding our use of cookies and browser storage, please reach out: