Privacy Policy

Last updated: April 5, 2026

Auth Platform Login ("we", "our", "the Service") is an authentication service operated at mybrandlogin.com. This policy explains how we handle your information when you use the Service to sign in to a partner application via Google OAuth.

1. Information We Collect

When you sign in through the Service, we receive the following from Google:

• Email address
• Display name
• Profile picture URL

We request only the openid, email, and profile scopes — the minimum required to identify you.

2. How We Use Your Information

Your information is used solely to:

• Verify your identity during the sign-in process.
• Generate a short-lived, signed authentication token (JWT) that is passed to the partner application you are signing in to.

We do not use your data for advertising, analytics, profiling, or any purpose other than authentication.

3. Data Retention

We do not maintain a user database. Your information is held in temporary storage only for the duration of the authentication flow:

• OAuth session state is deleted after use or expires within 10 minutes.
• One-time exchange codes expire within 5 minutes and are deleted after a single use.
• Signed tokens (JWTs) expire after 1 hour and are not stored by the Service.

4. Data Sharing

Your profile information (name, email, picture) is shared only with the specific partner application you chose to sign in to. We do not sell, rent, or share your data with any other third party.

5. Cookies & Tracking

The Service does not set cookies, use local storage, or employ any tracking technologies.

6. Security

All communication with the Service occurs over HTTPS. Authentication tokens are signed using HMAC-SHA256. Temporary data is stored in encrypted, edge-located storage with automatic expiration.

7. Your Rights

Because we do not maintain persistent user accounts or databases, there is no long-term personal data to access, correct, or delete. If you have questions about data held by a partner application, please contact that application directly.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

9. Contact

If you have questions about this Privacy Policy, please contact us at privacy@mybrandlogin.com.