Privacy notice
Last updated: October 18, 2026. This draft describes the mcpramen passwordless account service. Operator contact details and retention periods are being reviewed before public launch.
Information we store
We store your email address, display name, avatar URL, linked Google or GitHub identity, account plan and role. We record IP addresses, user agents, session times and account security actions. We do not collect an account password.
Why we use it
We use this information to sign you in, maintain your account, send transactional sign-in email, prevent abuse and investigate security events. Session cookies are necessary for authentication. Theme preferences may be stored on your device.
Sign-in providers and email
If you choose Google or GitHub, that provider shares identity information and a verified email address with us. Their privacy policies apply to your use of their services. Our email delivery provider processes your address and transactional messages to deliver sign-in links.
Retention and deletion
You can delete your account from Account. This removes your profile, linked identities and sessions. Security audit records may retain your email and request metadata after deletion; operational outbox records may also remain. Exact retention periods and backup deletion schedules are under review.
Your choices
You can update your name, unlink a provider, revoke sessions or delete your account. Rights to access, correction, deletion and objection may apply depending on your location. The operator contact and request procedure will be added before this notice is finalized.
Scope
This notice covers the account service. Self-hosted Dashi stores events in the infrastructure controlled by its operator. Hosted Dashi and the checker are future services; their data practices will be documented before launch.