OTP Assist processes page content locally on the user’s device to detect one-time verification codes and help fill OTP fields. The extension does not transmit OTPs, email contents, page contents, or personal data to external servers. No analytics, tracking, advertising, or data sale is used. Data stored locally includes only the latest detected OTP and user settings, and OTP data is automatically expired after a short period. Permissions are used only for extension functionality: page access for OTP detection/fill, storage for settings and temporary code state, and clipboard/tabs APIs for user-initiated fill/copy actions.