Privacy Policy

Last updated: 25 August 2026

AdFirm SSO is a privately operated single sign-on gateway for self-hosted services on the adfirm.cloud domain. It is run by an individual for a small invited group. This policy describes what it does with your information.

What we collect

If you choose to sign in with Google, Google sends us three things: your email address, your basic profile information (name and profile picture), and a stable identifier for your Google account. We request no other permissions, and we cannot see your Google password, your Gmail, your Drive files, your contacts, or any other Google data.

If you sign in with a local username, password, or passkey instead, we store only the credentials you set up directly with us.

The service also records ordinary authentication events — sign-in times, source IP address, and browser user agent — for security and troubleshooting.

Why we collect it

Solely to identify you and decide which services you may reach. Your email address is used to match your Google account to an account that already exists here.

What we do not do

We do not sell your information. We do not share it with third parties. We do not use it for advertising, profiling, or analytics. There are no third-party trackers on this site or on the sign-in pages.

Where it is stored

On self-hosted infrastructure operated privately in the United States. It is not stored with a third-party identity provider beyond Google's own role in the sign-in itself.

How long we keep it

Account information is kept until your account is removed. Authentication event logs are retained on a rolling basis for security purposes and are not archived long-term.

Your choices

You can disconnect your Google account at any time from your Google account's security settings, or ask the operator to unlink it. You can ask for your account and associated data to be deleted, and it will be — there is no business reason to retain it.

Contact

Questions, or requests to see or delete your data: zac@adfirm.us