Privacy Policy

Last Updated: October 6, 2026

Table of Contents

1. Introduction
2. Information We Collect
3. How We Use Your Information
4. Data Security
5. Data Retention
6. Cookies and Similar Technologies
7. Third-Party Services
8. Your Rights and Choices
9. Changes to This Privacy Policy
10. Contact Us

1. Introduction

Welcome to OneTimePass ("we", "our", or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By accessing or using OneTimePass, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the website or use our services.

Our Privacy Commitment

OneTimePass is designed with privacy at its core. Our service allows you to share sensitive information securely without requiring user accounts or collecting unnecessary personal data.

2. Information We Collect

2.1 Information You Provide

When using our service, you may provide the following types of information:

Message Content: The text content you choose to encrypt and share through our service. It is encrypted in your browser before it reaches us and can only be decrypted with the key in the unique link generated.
Contact Information: If you contact us through our contact form, we collect your name, email address, and any other information you choose to provide.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and usage of our services, including:

Log Data: Basic server logs including IP address, browser type, pages visited, time of visit, and referring website.
Device Information: Information about the device you use to access our service, such as device type, operating system, and browser.
Usage Data: Aggregated information about how you use our service, which features you access, and how you interact with the site.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide Our Services

To create and manage secure, self-destructing messages
To generate and deliver secure links for sharing messages
To ensure messages are properly displayed and deleted after viewing

3.2 To Improve Our Services

To understand how users interact with our service
To identify and fix technical issues
To develop new features and improve existing ones

3.3 To Communicate With You

To respond to your inquiries and support requests
To provide important service updates or security notifications

3.4 To Ensure Security

To protect our services against fraud, spam, and abuse
To maintain the integrity and security of our systems

4. Data Security

We implement appropriate technical and organizational measures to protect your information:

4.1 Encryption

Secrets are encrypted in your browser with AES-256-GCM before they are sent to us. The decryption key is placed in the link after the "#" sign; browsers never send that part of a link to a server, so we receive and store only encrypted data that we cannot read. We encrypt it a second time on our server, and all traffic uses HTTPS.

If your browser has JavaScript or browser encryption turned off, the secret is instead encrypted on our server (AES-256-GCM). In that case our server briefly handles the readable text while encrypting it. The page tells you which method was used.

4.2 Access Controls

We maintain strict access controls to limit who can access your data within our organization. Only authorized personnel with a legitimate need can access limited system information.

4.3 Self-Destructing Content

Messages are permanently deleted from our servers after being viewed once, or automatically when their expiry time is reached (chosen by the sender: 1 hour, 1 day or 7 days at most) if they remain unviewed.

4.4 No User Accounts

We don't require user accounts, which minimizes the personal information we collect and store.

Important: While we take significant steps to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain information only as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

Message Content: Encrypted message content is automatically deleted after it is accessed once, or when its expiry time (at most 7 days) is reached if it remains unaccessed.
Server Logs: Basic server logs are retained for 30 days for security and troubleshooting purposes.
Contact Information: Information submitted through our contact form is retained for as long as necessary to address your inquiry and for a reasonable period afterward.

6. Cookies and Similar Technologies

OneTimePass works without cookies. The only cookies we use are analytics cookies, and only if you agree to them.

6.1 Analytics Cookies (Only With Your Consent)

On your first visit we ask whether you allow Google Analytics. Until you click Accept, Google Analytics is not loaded at all and sets no cookies. If you accept, it sets cookies named _ga and _ga_<id> to understand how visitors use the site. Google Analytics is never loaded on pages that show a secret or a secret link, whatever you choose.

6.2 Storage in Your Browser

Your browser's storage keeps your analytics choice and your light or dark mode setting. It also briefly holds a secret's decryption key while you open it, and a generated password while you pass it to the secret form; these are deleted as soon as they're used. None of this is sent to us.

6.3 Changing Your Choice

You can change your analytics choice at any time with the Cookie settings link at the bottom of every page. If you withdraw consent, we delete the analytics cookies from your browser. You can also block or delete cookies in your browser settings.

7. Third-Party Services

Our service may include links to third-party websites, plugins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

7.1 Analytics Providers

With your consent (see section 6), we use Google Analytics to help us understand how users interact with our website. Google Analytics uses cookies and similar technologies to collect and analyze information about the use of our service. You can learn more about how Google uses your data at https://policies.google.com/privacy/partners.

8. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including:

Access: The right to know what personal information we hold about you.
Correction: The right to request correction of inaccurate personal information.
Deletion: The right to request deletion of your personal information.
Objection: The right to object to the processing of your personal information.
Data Portability: The right to receive your personal information in a structured, commonly used format.

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this Privacy Policy. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: info@onetimepass.com
Or via our Contact page

We are committed to addressing any questions, concerns, or complaints you may have about our privacy practices promptly and thoroughly.