Privacy & Account Data

What we store

We store account details, password hashes, favorites, reviews, requests, scenario records, and access-token hashes to provide the service. Account data is not published in skill packages.

Google sign-in

Google sign-in is optional. We receive your verified email address, name, and stable Google account identifier to create or connect your account. We request only OpenID, email, and profile information; we do not request access to Gmail, Drive, or other Google services. Google access and identity tokens are verified during sign-in and are not retained. Short-lived sign-in state is stored privately and expires after ten minutes; expired records are removed during subsequent sign-in requests. Existing password accounts require an explicit connection from an authenticated session.

External services

Google handles authentication under its own privacy policy when you choose Google sign-in. Cloudflare provides network services for this website and may process technical request information according to its configuration. External links are governed by their own sites' policies.

Accounts and credentials

Do not publish credentials in reviews or scenario records. Contact the site administrator to request account deletion or corrections. Email-based password recovery is not enabled.