Privacy

This page explains, in clear terms, how sign-in works and what data we process.

Login / Sign-in

Sign-in is handled via a third-party provider (for example Google) using OAuth. With your consent, the provider shares basic account information with us (name, email, profile image, provider ID). The flow is managed by NextAuth. Your password is never shared.

We use this information to identify you, manage access (roles such as admin or tester), and keep you signed in across sessions.

What data we process

Account data from the sign-in provider: display name, email address, profile image, provider ID
Internal profile data: role (admin, tester, member), optional feature or approval flags
Session data: session token or ID, expiry, technical metadata
Log data: IP address and user agent may briefly appear in server logs
Analytics and performance: aggregated usage and performance metrics

Cookies and storage

Authentication: NextAuth session cookies keep you signed in
Preferences: optional local settings (such as UI flags) saved in your browser
Retention: sessions expire automatically; logs are rotated regularly

Purposes and legal basis

Providing the service, sign-in, and account management
Operations, security, abuse and error prevention
Performance analysis and service improvements (aggregated)

Sharing and processors

We do not sell personal data. We use service providers for hosting, delivery, and analytics who may act as processors. Data is processed as needed to provide the service. We disclose information only where legally required or to enforce claims.

Your rights

Access, rectification, deletion, restriction of processing
Objection to processing in particular situations
Data portability (where applicable)
Withdrawal of consent with effect for the future

To exercise your rights, contact: prismatic.incorporated@gmail.com

Last updated: 3/1/2026

← Back