Privacy Policy

Last updated: November 2, 2026

This Privacy Policy explains what information Ixxamen accesses or receives, why it is needed, how it is used, where it is stored, whether it is shared, how long it is retained, and how you can delete it. It applies when you use the Ixxamen website, sign in with Google, save profile settings, favorites or focus lists, or otherwise use account features.

1. Information Ixxamen accesses from Google

When you choose to sign in with Google, Ixxamen uses Google OAuth. Depending on what Google returns during authorization, Ixxamen may receive or use the following information:

• Google account identifier: used to keep the correct Google account associated with the correct Ixxamen session.
• Email address: used to identify which Google account is connected and to help avoid signing into the wrong account.
• Display name: used only as account/profile context where available.
• OAuth access token: used temporarily to make authorized requests to Google's APIs during the active session.
• Google Drive appDataFolder access: Ixxamen requests https://www.googleapis.com/auth/drive.appdata, which allows Ixxamen to create, read, update and delete only hidden application-data files created for Ixxamen.

2. Ixxamen data stored in your Google Drive appDataFolder

Ixxamen uses the private Google Drive appDataFolder as the canonical cross-device storage for account-specific Ixxamen data. This may include:

• your Ixxamen profile name;
• your selected profile symbol, reactive background and line color;
• your saved favorites;
• your focus lists and related saved list data;
• timestamps, version information or synchronization metadata needed to keep saved data consistent across devices.

This information is stored so that when you sign in to Ixxamen on another supported device or browser with the same Google account, your saved Ixxamen data can be restored and synchronized.

3. How Ixxamen uses Google user data

Ixxamen uses Google user data only for user-facing account functionality. Specifically, it is used to:

• authenticate the Google account you choose to connect;
• associate the correct Ixxamen profile with that account;
• save and retrieve Ixxamen profile settings across devices;
• save and retrieve favorites and focus lists;
• synchronize changes you make to that Ixxamen data;
• delete Ixxamen app data when you use the Delete Account function; and
• revoke or end the current Google authorization when you sign out or delete the account, where supported.

Ixxamen does not use Google user data for targeted advertising, advertising profiles, credit decisions, surveillance, data brokerage, or unrelated analytics.

4. Where data is stored

Google Drive appDataFolder

Your cross-device Ixxamen account data is stored in the hidden appDataFolder of the Google account you authorize. That storage is provided by Google and is associated with your own Google account.

Your browser

Ixxamen may store a local browser cache of profile information and app state in local storage so pages can load quickly and continue to show the most recently synchronized state. Temporary OAuth/session information, including a short-lived Google access token and its expiry time, may be held in browser session storage during the current browser session.

Ixxamen does not intentionally store Google OAuth access tokens permanently in local storage.

5. Sharing and disclosure

Ixxamen does not sell, rent, or trade Google user data.

Ixxamen does not share the contents of your Ixxamen appDataFolder with advertisers, ad networks, data brokers, or unrelated third parties.

Google processes OAuth and Google Drive requests as the provider of the Google services you choose to use. The Ixxamen website is delivered through its web-hosting infrastructure, which may process ordinary technical request information such as IP address, browser information, security events, and server logs as part of operating and protecting the website. This hosting data is separate from the Google Drive appDataFolder content described above.

Google user data obtained through Google APIs is not sent to email-delivery providers unless you explicitly enable the “Receive Ixxamen emails” preference. When you opt in, your Google account email address may be stored in Cloudflare D1 and provided to Brevo only as needed to deliver the Ixxamen emails you requested.

6. Retention

Ixxamen app data may remain in your Google Drive appDataFolder for as long as you keep using Ixxamen with that Google account or until you delete the Ixxamen account/data.

Local browser cache remains until it is cleared by Ixxamen account actions, by your browser settings, or by you clearing site data. Session-stored OAuth information is intended to expire with the session and/or token expiry.

7. Deleting your data and revoking access

You can delete your Ixxamen account from the Profile settings using Delete account. When you do this, Ixxamen is designed to:

• delete Ixxamen's stored files from your Google Drive appDataFolder;
• clear locally cached Ixxamen account/profile data from the browser; and
• revoke or end Ixxamen's Google authorization where supported by the Google authorization flow.

You may also revoke Ixxamen's access directly from your Google Account's connected-app or third-party access settings. Revoking access prevents future authorized Google API access unless you choose to authorize Ixxamen again.

8. Security

Ixxamen uses HTTPS and Google's OAuth authorization system. The website requests the narrow drive.appdata scope rather than broad Google Drive access. Access tokens are treated as session credentials and are not intentionally persisted as permanent account data.

No internet service can guarantee absolute security. Ixxamen therefore limits requested permissions and the categories of Google data used to what is needed for the account features described in this policy.

9. Optional Ixxamen email communications

Ixxamen includes an optional Receive Ixxamen emails preference in Profile settings. It is off unless you choose to enable it. If you opt in, Ixxamen uses the email address of the Google account you connected to create an email-recipient record in Cloudflare D1.

The recipient record may include your email address, subscription status, an unsubscribe token, and timestamps needed to operate the email feature. Cloudflare D1 is the source of truth for this recipient list; Ixxamen does not use Brevo as its member database.

When an Ixxamen email is sent, the recipient email address is transmitted to Brevo solely for email delivery. Brevo may process delivery and transactional metadata as the email delivery provider. Ixxamen does not sell this information or provide it to advertising platforms or data brokers.

Every broadcast email includes an unsubscribe link. You can also turn off Receive Ixxamen emails from Profile settings. If you later opt in again, the subscription is reactivated. Deleting your Ixxamen account is designed to delete the associated Ixxamen email-recipient record as part of account deletion.

10. Google API Services User Data Policy

Ixxamen's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.

11. Children's privacy

Ixxamen does not knowingly use Google user data for profiling or advertising to children. If you believe personal information has been provided inappropriately, contact Ixxamen using the address below.

12. Changes to this Privacy Policy

This policy may be updated if Ixxamen's features, Google integrations, or data practices change. The current version will remain publicly available at this URL, and the "Last updated" date will be changed when material updates are made.

13. Contact

For privacy questions, account-data questions, or deletion-related questions, contact contact.ixxamen@gmail.com.