Privacy Policy — OTG Master

Last updated: 2026-06-26

OTG Master is an open-source Android application that mounts VeraCrypt-encrypted USB drives without root access. This policy explains what data the app does and does not collect.

Data collection

OTG Master collects no personal data of any kind. Specifically:

• No account, name, or email address is ever requested or stored.
• No usage analytics or crash reports are sent anywhere.
• No advertising SDKs or third-party tracking libraries are included.
• No data from your USB drive or its contents is transmitted off your device.

Permissions

The app requests the following Android permission:

• USB Host — required to communicate with USB mass-storage devices attached via OTG cable. The app reads raw sectors from the device solely to decrypt and mount the VeraCrypt volume locally on your device.

The app does not request internet, location, camera, microphone, contacts, or any other sensitive permission.

Data storage

All cryptographic operations (decryption, key derivation) happen entirely on-device and in-memory. No passwords, PINs, keyfiles, or decrypted data are written to your device's internal storage by the app.

Third-party services

OTG Master uses no third-party services, SDKs, or cloud backends.

Open source

The full source code is available at github.com/moylali/OTGMaster under the GPL-2.0-or-later license. You can verify these claims by reading the code directly.

Contact

If you have questions about this policy, open an issue at github.com/moylali/OTGMaster/issues.