For the 2FA module, the primary user data stored is the email address, which is used to create a unique identity and send OTPs.
If advanced features such as “Remember My Device” or Risk-Based Access Control are enabled, additional data may be processed, including:
- IP address
- Location
- Date and time
- Device details
If OTP over SMS is used, the phone number is also stored.
All collected data is used strictly for authentication and security purposes. miniOrange does not sell user data or send promotional/marketing communications to end users.
