Simple OTP reads Gmail messages with read-only access only to extract verification codes. OAuth tokens and extracted codes are stored locally in your browser profile; message bodies are discarded after extraction and never leave your device. The extension has no analytics, advertising, or tracking. A Pro license check sends only the license key, a random installation ID, and an opaque Google account identifier to the license server, never email addresses, messages, or codes. Full policy: https://simple-otp-site.pages.dev/privacy/