Privacy Policy

This Privacy Policy describes how FTool (“we”, “our”, “the service”) at https://ftool.vn collects, uses, and protects information when you use the website, signed-in features, and the FTool 2FA Authenticator browser extension (Chrome / Edge).

By using FTool, you agree to this policy. If you do not agree, please do not use the service.

FTool is a self-hosted or operator-deployed online tools workspace. The entity that runs your instance (for example the team behind ftool.vn) is the data controller for account and stored tool data on that instance.

For privacy requests regarding ftool.vn, contact the site administrator using the contact details published on the website.

Account data: name, email address, password hash (if you register with email/password), role and status, sign-in method (email and/or Google), and account creation time.

Two-factor authentication (2FA) vault: labels, issuers, and TOTP secret keys you choose to save while signed in (stored on the server database, up to the per-account limit).

Notes and other tools: content you save in tools that persist data (for example notes in MongoDB), optional note passwords (stored as bcrypt hashes), and share identifiers.

Telegram linking: if you connect Telegram, we store the link between your FTool user and your Telegram chat ID for watch/notification features.

Google Drive (optional): if you connect Google for 2FA backup, we store OAuth tokens needed to read/write your FTool backup file in your Google Drive (app-created folder). We do not read unrelated Drive files.

Technical data: HTTP logs (IP address, user agent, timestamps), session cookies (httpOnly JWT for web login), and similar data needed for security and operation.

Browser extension: locally stores server URL, extension session token, cached vault entries for display, and reads the ftool_session cookie on the FTool origin only to sync after web login — as described in the extension permissions.

Provide and secure the service: authentication, authorization, tool features, scheduled jobs, and API access.

Generate TOTP codes from secrets you stored (in the browser for quick entry, or via extension after sync).

Send notifications you configured (for example Telegram watches).

Improve reliability, prevent abuse, and comply with applicable law.

We do not sell your personal information to third parties.

Server-side data is stored in MongoDB (or equivalent) on infrastructure controlled by the operator. Passwords and note unlock passwords use one-way hashing (bcrypt). Sessions use signed tokens.

Traffic should be served over HTTPS in production. You are responsible for keeping your account password and 2FA secrets confidential.

Retention: account and tool data remain until you delete them or your account is removed by an administrator, unless law requires longer retention of logs.

Google: OAuth sign-in and optional Google Drive backup (Google’s privacy policy applies to Google services).

Telegram: when you link a bot, Telegram’s platform delivers messages you subscribe to.

Infrastructure: hosting, database, and email providers used to run the instance may process technical data as subprocessors.

We may disclose information if required by law or to protect rights, safety, and security of users and the service.

The extension’s single purpose is to display TOTP codes and sync your FTool vault with your account on the configured server (default https://ftool.vn).

Permissions: storage (local settings and cache), cookies (read ftool_session on the FTool site after you sign in on the web), tabs (open login/OAuth pages you request), alarms (periodic vault sync), and host access to your FTool server and HTTPS endpoints for API/OAuth.

The extension does not load or execute remote JavaScript; it only calls your server’s APIs over HTTPS.

Uninstalling the extension removes its local storage; server-side secrets remain until you delete them in FTool.

You can update profile and password in the dashboard, delete saved 2FA entries, disconnect Telegram/Google, and delete notes you own.

You may request access, correction, or deletion of your account data by contacting the site administrator.

You can use many tools without an account; features that sync to the server require sign-in.

FTool is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of FTool after changes means you accept the updated policy.

Website: https://ftool.vn

For privacy questions about this instance, please use the contact channel provided by the ftool.vn operator (support email or dashboard admin contact).