Privacy policy
Last updated: 12 October 2026
This policy covers the shared sign-in service at auth.m1au.com and the applications on m1au.com that use it. It explains what personal data we collect when you sign in, why, and what you can do about it.
Who we are
The services are operated by the owner of m1au.com. Contact: [email protected].
What we collect
- Account data: your e-mail address, name and, if you set one, a password (stored only as a salted hash).
- Google sign-in: if you choose "Continue with Google", Google shares your name, e-mail address, whether the e-mail is verified, and your profile picture. We request only the
openid,emailandprofilescopes. We do not get access to your Gmail, Drive, contacts or any other Google data. - Sign-in records: the time of each sign-in, your IP address and browser user agent, kept for security and abuse prevention.
- Application data: content you create inside an application (for example projects or uploaded files) is stored by that application to provide the service to you.
How we use it
- to sign you in and keep you signed in;
- to send account e-mails (verification codes, invitations, password resets);
- to protect the services against abuse and to investigate security incidents.
We do not sell your data, do not use it for advertising, and do not share it with third parties except the service providers below.
Use of Google user data
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to identify you at sign-in.
Service providers
- Hetzner Online (Germany/Finland): servers and storage where the data is kept, within the EU.
- Cloudflare: DNS and network protection for m1au.com.
- Resend: delivery of account e-mails.
- Google: only if you choose to sign in with Google.
How long we keep it
Account data is kept while your account exists. Sign-in records are kept for up to 12 months. Backups are overwritten on a rolling basis.
Your rights
You can ask us for a copy of your data, to correct it, or to delete your account and the data linked to it, by writing to [email protected]. If you are in the EU/EEA you also have the right to complain to your data protection authority. You can revoke our access to your Google account at any time at myaccount.google.com/permissions.
Cookies
We use only cookies needed to sign you in and keep your session secure. There are no advertising or tracking cookies.
Changes
If we change this policy we will update the date at the top of this page.