Open Source Bhaiya

Terms of Service

Last updated: July 2026

Welcome to OpenSourceBhaiya. These Terms of Service govern your access to this website and any open-source software, projects, or resources published through it. By accessing this website or downloading any software made available here, you agree to these terms.

OpenSourceBhaiya exists to share technology openly, encourage learning, and build useful software with transparency, privacy, and long-term maintainability at its core.

1. Purpose

OpenSourceBhaiya is a personal portfolio and an open-source project hub where software, experiments, tools, and technical resources are shared with the community.

The purpose of this website is to showcase projects, distribute open-source applications, document technical work, and provide educational resources. Nothing published here should be interpreted as professional security, legal, financial, or technical advice unless explicitly stated.

Using this website does not create any professional, commercial, or contractual relationship between you and the maintainer.

2. Open Source Software

Every application distributed through OpenSourceBhaiya is open-source and released under its respective license. The applicable license can always be found within the corresponding GitHub repository.

All software is provided "as is", without warranties of any kind, whether express or implied. This includes, but is not limited to, warranties of merchantability, fitness for a particular purpose, reliability, or non-infringement.

Before using any application, you are encouraged to review the publicly available source code, understand its functionality, and evaluate whether it meets your own security and operational requirements.

Unless otherwise stated, you are free to inspect, modify, fork, and contribute to the projects according to their individual licenses.

3. Limitation of Liability

While every project is developed with care and thoroughly tested before release, no software can guarantee complete freedom from bugs or unexpected behavior.

The maintainer shall not be held responsible for any direct, indirect, incidental, consequential, or special damages arising from the installation, modification, execution, or misuse of any software distributed through this website.

By downloading or using any application, you acknowledge that you do so entirely at your own discretion and risk.

4. Privacy

Privacy is treated as a fundamental design principle rather than an afterthought.

This website does not use invasive third-party tracking systems or advertising technologies to monitor visitors. Any information voluntarily shared through email or contact forms will only be used for direct communication and will never be sold, rented, or shared with third parties without consent unless required by law.

Many of the applications published here follow a Local-First philosophy, meaning sensitive information is processed directly on your own device whenever possible. Unless a feature explicitly requires communication with an external service, applications are designed to avoid unnecessary data collection, telemetry, or background tracking.

5. Third-Party Services

Some applications may integrate with trusted third-party platforms such as GitHub, Google, or other officially supported services when their functionality requires it.

Any integration with third-party services is handled through their official APIs, with appropriate user authorization, and in accordance with each platform's privacy policy and terms of service.

This website may contain links to external websites. Those sites have their own terms of service and privacy policies which you should review independently.

6. Security

Security is considered throughout the development process rather than being treated as a final step.

If you discover a security vulnerability in any project published through OpenSourceBhaiya, responsible disclosure is strongly encouraged. Please avoid publicly disclosing vulnerabilities before they can be reviewed and addressed.

Responsible security research helps improve software for everyone.

7. Changes to These Terms

These Terms of Service may be updated periodically to reflect improvements, legal requirements, or changes to the projects available through this website.

The latest revision date will always appear at the top of this page. Continued use of this website after updates constitutes acceptance of the revised Terms.

8. Contact

Questions regarding these Terms, security reports, collaboration opportunities, or general feedback are always welcome.

Whether you've discovered a bug, identified a security issue, have suggestions for improvement, or simply want to discuss technology, feel free to get in touch through the available contact channels.

Open source grows through collaboration, and every thoughtful contribution helps improve the projects shared here.

9. OTP Sync & Notification Access

OTP Sync is a local-first utility designed to securely transfer One-Time Passwords (OTPs) from your Android device to your computer. To function seamlessly, OTP Sync uses the Android Notification Listener permission. This permission is strictly used to intercept incoming push notifications exactly when they arrive. OTP Sync never reads your inbox history, requires zero passwords, and all parsing happens securely on your device.

What Notification Data is Accessed & How We Use It

OTP Sync exclusively processes your notifications locally. This access is strictly used to monitor and extract Verification Codes, OTPs, and Security Alerts so they can be beamed to your paired PC. The intercepted data never leaves your device and is never sent to external servers. We do not use your data for advertising, analytics, profiling, or any other secondary purpose.

Data Protection Mechanisms for Sensitive Data

All email scanning and OTP extraction happens entirely locally on your Android device. Once an OTP is detected, it is immediately encrypted using military-grade End-to-End Encryption (AES-256-GCM) before it ever leaves your phone. The encrypted payload is transmitted via a temporary Firebase Realtime Database relay to your paired PC Chrome Extension, which holds the sole decryption key. We have absolutely no ability to decrypt, read, or intercept your OTPs or emails.

Data Retention and Deletion

OTP Sync operates on a strict Zero-Knowledge architecture and does not store your emails on any server. Locally: Extracted OTPs are kept in a temporary device cache and automatically purged. On our Relay Server: The AES-encrypted OTP payloads are automatically deleted from our Firebase relay database within 5 seconds of transmission. We do not retain, store, or archive any Google user data. If you unlink your account or uninstall the app, all local cryptographic keys and Google access tokens are instantly and permanently destroyed.