Legal Disclaimer & Limitation of Liability

Read this page in full. It defines the boundaries of OTPSync's obligations and your responsibilities as a user of a zero-knowledge security product.

1. No Professional Security Guarantee

OTPSync is a consumer software tool for generating and managing TOTP codes within a web browser. It is not a managed security service, regulated financial product, or certified compliance platform. Use of OTPSync does not, by itself, satisfy any specific regulatory, organizational, or industry security standard.

2. "As Is" and "As Available"

THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, OTPSYNC DISCLAIMS ALL WARRANTIES, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

We do not warrant that the Service will be uninterrupted, error-free, immune to unauthorized access, or compatible with every website, browser version, or operating system configuration.

3. Zero-Knowledge Passcode Responsibility

Because OTPSync operates on a Zero-Knowledge model, you are 100% responsible for remembering your Custom Passcode. If you forget or lose your passcode, OTPSync cannot decrypt, reset, or recover your 2FA data. You acknowledge and agree that OTPSync shall not be held liable for any locked accounts, lost data, or damages resulting from a forgotten passcode or unauthorized local device access.

This is not a disclaimer of convenience — it is a statement of cryptographic fact. Your passcode is the sole key to your encrypted vault. We never possess a copy. No support agent, engineer, or executive at OTPSync can override this design.

You are equally responsible for:

• Securing the physical device and browser profile where the extension is installed
• Maintaining backups of your recovery phrase, if generated during setup
• Revoking access to lost or stolen devices through your dashboard
• Evaluating whether browser-based 2FA is appropriate for each account you protect

4. User Account and Third-Party Lockouts

OTPSync generates authentication codes; it does not control third-party services (banks, email providers, exchanges, employers). If you lose access to your vault and cannot produce valid TOTP codes, third-party account recovery is governed solely by those providers' policies. OTPSync bears no responsibility for account lockouts, asset freezes, employment access issues, or data loss at external services.

5. Local Device and Browser Security

Decrypted secrets exist in your browser's memory only while your vault is unlocked. OTPSync is not liable for compromise arising from malware, shared workstations, shoulder surfing, unpatched browsers, compromised operating systems, or extensions installed alongside OTPSync that intercept keyboard or clipboard input.

6. Cloud Synchronization Risks

Encrypted backups reduce data-loss risk but do not eliminate it. Network failures, OAuth token revocation, Google API outages, or user error may interrupt sync. OTPSync is not liable for synchronization delays, incomplete uploads, or loss of ciphertext where you have failed to maintain independent backups.

7. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL OTPSYNC, ITS FOUNDERS, OFFICERS, EMPLOYEES, CONTRACTORS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, LOSS OF DATA, COST OF SUBSTITUTE SERVICES, ACCOUNT LOCKOUT, OR BUSINESS INTERRUPTION, ARISING OUT OF OR RELATED TO YOUR USE OF — OR INABILITY TO USE — THE SERVICE, EVEN IF OTPSYNC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OTPSYNC'S TOTAL AGGREGATE LIABILITY FOR ANY CLAIM ARISING OUT OF THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID TO OTPSYNC IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) FIFTY U.S. DOLLARS ($50.00).

Some jurisdictions do not allow exclusion of certain damages. In those jurisdictions, our liability is limited to the maximum extent permitted by law.

8. Assumption of Risk

By using OTPSync, you voluntarily assume all risks associated with storing and generating two-factor authentication credentials in a browser extension, including the risk of irrecoverable data loss if you forget your passcode or fail to maintain adequate device security.

9. Changes

We may update this Disclaimer. Continued use of the Service after revisions constitutes acceptance. The current version is always available at this URL.

10. Contact

Email: [email protected]