Selamat datang di 2FA-Tool.com ("kami", "milik kami", atau "Situs Web"). Kami memahami pentingnya autentikasi dua faktor dalam melindungi akun digital pribadi dan perusahaan. Sejak hari pertama, kami membangun alat ini dengan arsitektur keamanan Zero-Trust, Hanya Sisi Klien yang ketat.
Kebijakan Privasi ini menguraikan bagaimana informasi Anda ditangani, bagaimana komputasi kriptografi lokal bekerja, bagaimana mitra periklanan (termasuk Google AdSense) menggunakan cookie, dan bagaimana Anda dapat menggunakan hak privasi Anda.
Tanggal Berlaku: Maret 2026 · Versi: v2.1
1. Prinsip Keamanan Utama: Tanpa Unggah, Tanpa Penyimpanan Rahasia 2FA
Tidak seperti generator online konvensional yang mengirimkan rahasia pengguna ke server backend jarak jauh untuk komputasi, 2FA-Tool.com beroperasi 100% di sisi klien dalam browser web lokal Anda:
Kriptografi Lokal dalam Memori
Dekode Base32 dan hashing HMAC-SHA1 dijalankan secara ketat oleh Web Crypto API bawaan browser.
Berfungsi Penuh secara Offline
Putuskan sambungan internet Anda atau aktifkan mode pesawat; kode dan pengatur waktu terus diperbarui secara akurat tanpa permintaan server apa pun.
Pelepasan Memori Instan
Tidak ada cookie pelacakan, tidak ada penyimpanan LocalStorage. Menutup tab browser akan langsung menghapus semua status memori seketika.
2. Pengungkapan Cookie Iklan Pihak Ketiga & Google AdSense
Untuk mendukung operasi gratis yang berkelanjutan, pemeliharaan, dan biaya hosting CDN global dari alat ini, iklan pihak ketiga (termasuk Google AdSense) dapat ditampilkan di situs web. Sesuai dengan kebijakan Google dan peraturan privasi:
- Vendor pihak ketiga, termasuk Google, menggunakan cookie untuk menayangkan iklan berdasarkan kunjungan pengguna sebelumnya ke situs web ini atau situs web lain di Internet.
- Google's use of advertising cookies (such as the DoubleClick DART cookie) enables it and its partners to serve ads to users based on their visits to this site and/or other sites across the web.
- Zero Connection to Secrets: Cookies contain only anonymous device identifiers or generic geographic preferences. They never contain and cannot access any 2FA secret keys, codes, or labels you input into the tool.
How to Manage or Opt Out of Personalized Advertising
You have the full right to opt out of personalized advertising at any time through official portals:
3. Log Akses Server Web Standar
Like virtually all web applications, when your browser requests static assets (such as HTML, CSS, or JS files), the server infrastructure automatically records standard HTTP access logs (including IP address, browser User-Agent, request timestamp, and HTTP status codes). These logs are utilized solely for network security defense, DDoS mitigation, and server health monitoring. They contain zero 2FA secrets and are rotated and purged on schedule.
4. Global User Privacy Rights (GDPR & CCPA/CPRA)
Under the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA), users possess rights concerning data access, correction, deletion, and objection. Because this website requires no account registration, collects no personal identifiers (name, email, phone number), and preserves no user secrets on our servers, there is no server-side profile or identifiable personal database linked to any natural person.
5. Children's Online Privacy Protection
This website is a general security utility and does not knowingly target, solicit, or collect personal information from children under the age of 13 (or the legal threshold in your jurisdiction). Minors should learn two-factor authentication practices under guardian supervision.
6. Policy Amendments and Contact Channels
We may update this Privacy Policy periodically to reflect legal or advertising compliance updates. Changes take effect upon posting. If you have questions regarding this policy, feel free to contact our security team: