Privacy Policy

Last updated: March 9, 2026

Overview

OAuth Share is an open-source tool that lets you use your phone's Google account to sign in on desktop browsers. This privacy policy covers the Chrome extension, mobile web app, relay server, and this website.

We are committed to protecting your privacy. OAuth Share is designed with a zero-knowledge architecture — we never see, store, or have access to your credentials.

Chrome Extension

Permissions Used

  • storage — Stores session configuration locally in your browser. No data is sent externally.
  • webNavigation — Detects when you navigate to Google OAuth sign-in pages so the extension can activate.
  • Host permission (accounts.google.com) — Required to intercept OAuth redirects on Google's sign-in domain.

Data Handling

  • The extension does not collect, transmit, or store any personal information.
  • OAuth tokens are encrypted end-to-end on your device before being relayed. The encryption key never leaves your devices.
  • No analytics, tracking, or telemetry is included in the extension.

Mobile Web App

  • The mobile app runs entirely in your browser. No data is stored on our servers.
  • QR code scanning happens locally on your device using your camera.
  • Camera access is only used for scanning QR codes and is not recorded or transmitted.

Relay Server

  • The relay server facilitates communication between your phone and desktop browser via WebSocket connections.
  • All data passing through the relay is encrypted end-to-end. The server cannot decrypt any payloads.
  • Sessions are ephemeral and expire automatically. No session data is persisted to disk or database.
  • The relay server does not log message contents, IP addresses, or any identifying information.

Waitlist (This Website)

  • If you sign up for the waitlist, we collect only your email address.
  • Email addresses are stored via Formspree and are used solely to notify you when OAuth Share launches.
  • We will never sell, share, or use your email for any other purpose.
  • You can request removal of your email at any time by contacting us.

Third-Party Services

  • This website does not use any analytics, cookies, or tracking scripts.
  • The waitlist form is processed by Formspree. See their privacy policy.

Open Source

OAuth Share is fully open source. You can audit the complete source code, including the extension, mobile app, relay server, and this website, on GitHub.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. For significant changes, we will notify waitlist subscribers via email.

Contact

If you have questions about this privacy policy or want to request data removal, please open an issue on our GitHub repository.