Privacy Policy
Effective 10 October 2026
This policy explains how Aldertwig handles information in its shared Google sign-in service. It covers that sign-in service; the participating app's privacy notice also applies to information it stores and to features you use after signing in.
Information we process
When you choose Google sign-in, we process your Google account identifier, verified email address and basic profile information, including your name and profile picture when Google supplies them. We also process temporary sign-in codes, identity tokens and security values needed to complete and protect the sign-in.
Hosting and network providers may process IP addresses, request timestamps, browser information and operational logs when delivering the service. Do not include passwords or identity tokens in support messages.
Why we use it
We use this information to authenticate you, return you to the app you selected, prevent sign-in misuse, diagnose failures and respond to support requests. Google sign-in requests only basic identity scopes (openid, email and profile). It does not request your Gmail, Drive files, contacts or calendar.
Who receives it
Google authenticates your account. Aldertwig's hosting providers, including Netlify and Cloudflare where used, process requests needed to deliver and protect the service. The participating app you started from receives Google's identity token to establish its own authenticated session. That token contains identity information; it is not sent to unrelated apps.
We do not sell Google sign-in information or use it for advertising. We may disclose information when required by applicable law or to investigate misuse and protect the service.
Cookies and retention
The sign-in service sets a secure, temporary browser cookie to bind the sign-in request to your browser. It expires after ten minutes and is cleared when the callback completes. The sign-in handler does not create a separate user database or persist Google's identity tokens. Participating apps retain their own accounts and sessions; infrastructure logs are governed by provider configurations and applicable retention requirements.
Your choices and requests
You can cancel sign-in or remove the connection through your Google account connections. Removing the Google connection does not itself delete an account or records held by a participating app. Contact that app for account deletion, or contact us for help identifying the responsible service.
To request access, correction or deletion of personal information handled by Aldertwig, or ask about its processing, email [email protected]. We may need to verify your identity before acting on a request. Rights and exceptions depend on applicable law.
Service locations and updates
Our infrastructure providers may process information in countries other than your own. Contact us for information about the arrangements relevant to your account. We will publish changes to this policy here and update its effective date.