privacy and terms

updated 3 November 2026

otto has no account system and no server of its own. your vault never leaves your Mac, and nothing about you is sold or shared.

privacy

the app

• the vault (a KeePass file), its backups and the activity log are in your Library folder, and the vault's key is in your Mac's keychain. none of it is sent anywhere. the activity log says what agents asked for and how it went, never the secrets otto keeps.
• to show a login's site icon, otto gets the icon from that site and keeps a copy on your Mac. the site sees a request from your Mac and nothing else.
• every 24 hours, unless you turn it off in settings, otto checks otto.alfaoz.dev for a new version. updates are handled by Sparkle, and the check says only which version of otto you have.
• if you turn on remote, your phone connects to your Mac through your own Tailscale network, and only devices on your Tailscale account can reach it. Tailscale's own privacy policy covers Tailscale.
• if an agent asks otto to read a 2FA setup QR code from your screen, otto takes one picture of it, reads the code, and throws the picture away without saving it.
• agents you connect get what you let them have: results like “filled”, 6-digit codes, and the values you hand to programs with otto run. what an agent, and the AI service behind it, does with those is up to them. otto does its best to keep things safe, but nothing is guaranteed on the agent's side.

the Chrome extension

• it only talks to otto on your own Mac, through Chrome's native messaging. it keeps no history and sends nothing over the network.
• when an agent asks otto to fill a login, a 2FA code or a card, the extension looks at your tabs' addresses to find the one on the right site, and fills the fields on that page.
• when an agent asks otto to read a 2FA setup QR code, the extension takes a picture of that tab. otto reads the code from it on your Mac and throws the picture away without saving it.
• what it does with your data follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

this website

• this website has no cookies and no analytics, and neither does otto. the site loads nothing from anywhere else.
• otto.alfaoz.dev keeps standard access logs (IP address, time, the page or file, the browser) for about two weeks, to keep it running. otto's update checks and downloads are in them too.

terms

otto is made by alfaoz. using otto or this website means you agree to these.

• otto is free. its source code is under the GNU General Public License, version 3, and nothing in these terms takes away what that license gives you.
• it comes as it is, with no warranty of any kind. it can have bugs, and in an app that holds your passwords, a bug can cost you something.
• you set the rules, and otto follows them: a login on auto or bypass gets used without asking you, and anything you allow goes ahead. what happens after you allow something is on you.
• agents make mistakes, and they can be tricked by what they read. once an agent is logged in, at a checkout or running a command, what it does there is between you and that agent.
• the sites you log into, the shops you pay at and the AI services behind your agents have their own terms. some don't allow automated logins or purchases, and keeping to those is up to you.
• use otto only for accounts, cards and Macs that are yours, or that you're allowed to use.
• your vault is only on your Mac. keep a copy of its recovery key somewhere safe: if your keychain and the recovery key are both gone, nobody can open the vault, alfaoz included.
• as far as the law allows, alfaoz isn't liable for any loss that comes from using otto or this website: lost data, money, accounts or access, or anything an agent does with what you allowed.
• these terms are under Turkish law. rights that the law where you live doesn't let anyone take away still apply.
• otto isn't made by or connected to Anthropic, OpenAI, Google, Apple, Tailscale or any other company named on this site. their names and logos belong to them.
• these terms can change. the date at the top says when they last did, and using otto after a change means you agree to the new version.

contact

questions about otto or this page go to alfa.ozaltin@gmail.com, and bugs to github.com/alfaoz/otto/issues. report security problems privately on GitHub, through “report a vulnerability”.