Privacy Policy

Google user data we access

When you choose to sign in with Google, we request the OAuth "email" and "profile" scopes and receive the following from your Google Account through Google's OpenID Connect userinfo endpoint: your Google Account identifier (sub), your email address, your email-verified status, your display name, and your profile picture URL. We do not request access to Gmail, Google Drive, Contacts, Calendar, or any other Google service.

How we use Google user data

We use your Google Account identifier and email address solely to create and secure your monotirou.com account and to sign you in. We use your display name and profile picture URL only to populate your public monotirou.com profile. monotirou.com's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not use it for any purpose other than providing and improving the monotirou.com service.

How we share Google user data

We do not sell Google user data and we do not transfer it to third parties except: (a) to service providers that host our infrastructure and database and act on our instructions to operate monotirou.com; (b) when required to comply with applicable law or valid legal process; or (c) as part of a merger or acquisition, in which case we will require the recipient to honor this policy. We do not share Google user data with advertising networks or data brokers.

How we store and protect Google user data

Google user data is stored in our production PostgreSQL database and is transmitted only over encrypted HTTPS connections. Access is limited to the personnel who operate the service. We do not store your Google OAuth access or refresh tokens; the token issued during sign-in is used once to read your basic profile and is then discarded. After sign-in you hold only an HttpOnly session cookie, which cannot be read by scripts in your browser.

Data retention and deletion

We retain your Google Account identifier, email address, display name, and profile picture URL for as long as your monotirou.com account remains active. To request access to your data or deletion of your account and its data, email the address below; we complete verified deletion requests within 30 days, except where we must retain limited records to comply with legal obligations or resolve disputes.

Other data we process

Separately from Google Sign-In, we process account and authentication data, profile data, content you upload, watch activity, search activity, reports you submit, comments, playlists, technical logs, and analytics events. We use this data to operate the website, protect users, moderate content, respond to reports, improve reliability, detect abuse, and comply with legal obligations.

Changes to this policy

If we change how monotirou.com accesses, uses, stores, or shares Google user data or other personal data, we will update this page, change the effective date above, and notify signed-in users through an in-product notice before the change takes effect.

Related reading