Privacy
Draft. This has not been reviewed by a lawyer yet.
Who we are
Automate With Cameron accounts is the sign-in for Hurdle, Gridwork and the other Automate With Cameron apps. It's run by Tomtar LLC, State of Texas. Questions: willy@tomtarlabs.com.
What we store
- Your name, email address, whether you've confirmed it, and your profile photo link if Google provides one.
- If you sign in with Google: your Google account id and the tokens Google returns at sign-in, encrypted. We ask Google only for your name, email address and photo.
- If you use a password: a salted one-way hash of it, never the password itself.
- A sign-in cookie for this site only (30 days) and the matching session record, with the IP address and browser it came from.
- Confirmation and password-reset links, which expire after an hour.
- To limit repeated sign-in attempts: the IP address of recent requests and a count.
- For each app you sign in to: which app, what it was given, and the tokens we issued to it.
What apps receive
When you sign in to an app with this account, the app receives an id for you, your name, email address, whether it's confirmed, and your photo link. Apps never see your password or your Google tokens. Each app's own privacy policy covers what it does with them.
Where it is stored
In a Postgres database run by Neon in AWS US East (Virginia). The service runs on Vercel in the United States. Confirmation and reset emails go through Resend, which receives your address and the email. When you choose a password, the first five characters of its SHA-1 hash are checked against Have I Been Pwned's list of breached passwords; the password itself never leaves our server. We don't sell or share your data with anyone else, and we use no analytics or advertising cookies.
How long we keep it
Until you ask us to delete it. Email willy@tomtarlabs.com to have your account deleted.