Privacy Policy

1. Who is responsible

Volker Kettenbach
Adelheidstraße 12
65185 Wiesbaden, Germany
Email:

2. In short

Quick Authenticator does not collect any personal data on our side: your accounts and secrets stay on your Mac and – if you turn it on – in your own iCloud. This website uses no cookies and no third-party services, and counts visits anonymously with a statistics tool we run ourselves.

3. Website and hosting

The website is hosted by Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open a page, Cloudflare necessarily processes your IP address, the time, the requested address and your browser’s identification to deliver the page and fend off attacks. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure and fast website). Cloudflare acts as our processor; transfers to the USA are based on the EU-US Data Privacy Framework, under which Cloudflare is certified, and on standard contractual clauses.

Language choice: When you pick a language, your browser stores that choice in its local storage (key “qa-lang”). It never leaves your device, is strictly necessary for the function you asked for (Section 25(2) No. 2 TDDDG) and can be deleted in your browser settings.

4. Visitor statistics (Umami)

We count visits with Umami, which we run ourselves at umami.vicosmo.com on Google Cloud in Frankfurt am Main (region europe-west3); the data stays in the EU. Google Cloud EMEA Limited (70 Sir John Rogerson’s Quay, Dublin 2, Ireland) is our processor under the Cloud Data Processing Addendum. No data goes to an analytics company.

Umami records the page visited, the referring page, browser, operating system, device type, screen size, language, country, page load times and clicks on a few buttons (App Store, Windows waitlist, support email, language choice). It sets no cookies and stores no IP address. To count unique visits it computes a hash from IP address and browser identification with a regularly changing salt; you cannot be tracked across devices or over a longer time. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding how the website is used and improving it). You can object at any time, for example by blocking scripts from umami.vicosmo.com.

5. Contact by email

Emails to are forwarded via Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as our processor) to our self-hosted GitLab, where they are handled as confidential tickets. We use your address and message only to answer you. Legal basis: Art. 6(1)(b) GDPR for questions about a purchase, otherwise Art. 6(1)(f) GDPR. We delete the ticket when your request is settled, unless statutory retention periods apply, or earlier if you ask us to.

6. Windows waitlist

If you email us to be notified about a Windows version, you consent to us storing your address and message for this purpose (Art. 6(1)(a) GDPR). They are kept as a confidential ticket in our self-hosted GitLab, used only for a single notification when a Windows version is available and deleted afterwards. You can withdraw your consent at any time by email; we then delete your entry.

7. The app

Your accounts and secrets are stored in the macOS Keychain and in a protected file on your Mac. Camera images, screen captures and clipboard contents used to read QR codes are processed only on your Mac and never uploaded. The app contains no analytics, no advertising and no third-party SDKs, and it does not talk to any server of ours – we don’t have one.

8. iCloud sync (optional)

If you turn on sync, your accounts are stored with Apple’s CloudKit in the private database of your iCloud account. Secrets, notes, service, account name and website are end-to-end encrypted with keys only your devices hold; technical fields such as algorithm, number of digits, period, order and modification date are stored by Apple encrypted, but not end-to-end. Apple is responsible for iCloud (Apple Privacy Policy). We have no access to your iCloud data.

9. Purchases

The trial and the full version are handled by the App Store. Apple processes your payment and Apple Account details; we receive no payment or personal data, only anonymous sales reports.

10. Crash reports

Only if you have allowed sharing with app developers in macOS (System Settings › Privacy & Security › Analytics & Improvements) does Apple provide us with anonymised crash reports and usage statistics.

11. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). An email to is enough. You also have the right to lodge a complaint with a supervisory authority (Art. 77), for example Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

12. Last updated

October 2026