Privacy Policy for markm.cd

Effective date: November 11, 2026 · Last updated: November 11, 2026

1. Overview & Application Identity

This Privacy Policy describes how markm.cd (https://markm.cd), a personal website and project hosting application operated by its owner, collects, uses, stores, and protects information when you visit public pages or authenticate using Google Sign-In.

If you have any questions about this policy or wish to exercise your privacy rights, contact the site operator at privacy@markm.cd.

2. Information We Access and Collect

Public areas of markm.cd (including the homepage and public project demos such as /litt.chr/) do not require registration or login.

  • Google Sign-In Profile Data: When you choose to authenticate into restricted personal tools on markm.cd via Google OAuth 2.0, we request only the standard sign-in scopes (openid, email, and profile). This provides:
    • Your Google Account unique subject identifier (sub)
    • Your email address and email verification status
    • Your display name and profile picture URL, if supplied by Google
  • No Sensitive or Workspace Data: markm.cd does not request access to, read, modify, or store your Gmail messages, Google Drive files, Google Calendar events, contacts, or any other sensitive or restricted Google Workspace APIs.
  • Essential Session Data: When signed in, markm.cd may set an essential authentication cookie or session token strictly to keep your login session active. We do not use advertising, behavioral profiling, or third-party tracking cookies.
  • Standard Server Logs: Like most web servers, our hosting infrastructure may automatically log basic HTTP request metadata (IP address, request path, timestamp, HTTP status code, and browser user-agent) for security, rate limiting, and troubleshooting.

3. How We Use Information

Information accessed through markm.cd is used strictly for the following purposes:

  • Authentication & Access Control: Verifying your identity so only the site owner and explicitly authorized users can access private project routes and utilities.
  • Session Display: Showing your signed-in name or email address inside authenticated interfaces so you can confirm which account is active.
  • Security & Diagnostics: Protecting the site against unauthorized access, abuse, and operational errors.

We do not use Google user data for advertising, marketing, user profiling, or training artificial intelligence or machine learning models.

4. Data Sharing & Third-Party Disclosure

markm.cd does not sell, rent, trade, or transfer your Google user data or personal information to third parties, advertisers, or data brokers.

Data is processed solely on the hosting infrastructure supporting markm.cd and is disclosed only if strictly required to comply with applicable law or valid legal process.

5. Google API Services User Data Policy (Limited Use)

Limited Use Commitment: markm.cd's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Storage, Security, and Retention

  • Security Measures: All traffic to and from markm.cd is encrypted in transit using HTTPS/TLS. Any stored session metadata or access controls are protected with restricted server permissions and principle-of-least-privilege configuration.
  • Retention Period: We retain basic authentication and session records only for as long as needed to provide authorized access to personal tools on markm.cd, or until you revoke access or request deletion. Standard web server logs are automatically rotated on a routine operational schedule.

7. Revoking Access & Requesting Data Deletion

You remain in full control of your Google Account data at all times:

  1. Revoke OAuth Permissions: You may disconnect markm.cd from your Google Account at any time on your Google Account Permissions page. Once revoked, markm.cd can no longer authenticate or receive profile details from your Google Account.
  2. Request Account or Session Deletion: To request immediate deletion of any cached user profile, email record, or session data stored on markm.cd, send an email to privacy@markm.cd from the relevant email address (or specifying the Google Account email to remove). Verified deletion requests are processed within 7 days.

8. Changes to This Policy & Contact

We may update this Privacy Policy from time to time to reflect changes in hosted personal projects or legal requirements. Updates will be published at https://markm.cd/privacy/ with a revised effective date.

For any privacy questions or deletion requests, email privacy@markm.cd.