Privacy Policy — Otentik Code Reader
How the Otentik Code Reader app, a free Visible Digital Seal (VDS) and 2D-Doc reader, processes your data: no biometrics, no account, no tracking.
Last updated: October 13, 2026
In short
Otentik Code Reader reads and verifies Visible Digital Seals (VDS) and 2D-Doc codes. The app does no biometrics, requires no account and collects no data that identifies you. The content of the seals you read stays on your device.
Data controller
TSO OTENTIK, a single-shareholder SAS registered in France (SIRET: 98511615100012), 15 Rue Dulac, 75015 Paris, France. The app is developed by id3 Technologies. Contact and data protection: contact@otentik.codes.
Data processed
Processing takes place on your device:
- ◆ Camera images — analysed in memory to read the code, never stored or transmitted.
- ◆ Image picked from the photo library (iOS) — read in memory to find a code, neither copied nor transmitted.
- ◆ Seal content — shown on the device, erased when you return home or scan again.
- ◆ A seal's contact details — added to your contacts only at your request.
- ◆ Settings and trust resource cache — kept on the device until uninstall.
Network exchanges
These exchanges expose the device's IP address, but no data about you or the seals you read:
- ◆ App licence — read from a service hosted by Google Firebase in the European Union (europe-west1), protected by Firebase App Check (Play Integrity, App Attest). Nothing is written to it.
- ◆ Trust resources — trust lists, certificates, presentation templates and revocation lists, downloaded then cached. The server sees the name of the requested resource.
- ◆ Code reading engine — its licence is activated at start-up with Code Corporation's server (United States), using the app's licence key and technical information about the device.
- ◆ Updates — Google Play on Android; Apple's public service on iOS (app identifier and country).
Device integrity check
The app detects locally whether the device is rooted or jailbroken, to warn you. The result is sent nowhere.
What the app does not do
No analytics, no advertising, no crash reporting, no tracking, no sale of data.
Permissions requested
- ◆ Camera (Android, iOS) — reading codes.
- ◆ Internet (Android, iOS) — licence, trust resources, updates.
- ◆ Photo library (iOS) — picking an image containing a code, at your request.
- ◆ Contacts (iOS) — adding a seal's contact details, at your request.
Legal bases and transfers
Reading and verifying seals rely on performing the service you request (GDPR, art. 6-1-b); app security and certificate revocation checks rely on legitimate interest (art. 6-1-f). Exchanges with providers based in the United States (Google, Apple, Code Corporation) rely on the EU–US Data Privacy Framework or, failing that, on the European Commission's standard contractual clauses.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability. As the app keeps no personal data off your device, clearing its data or uninstalling it is usually enough. For any request: contact@otentik.codes. You may also lodge a complaint with the CNIL (www.cnil.fr) or your local data protection authority.
Minors and changes
The app is intended for people who verify documents; it is not intended for children under 15. Any change to this policy is published on this page, with its update date.