ALEXSOFT

Privacy Policy

Effective and last updated: August 31, 2026

1. Scope

This Privacy Policy applies to alexsoft.top, AlexSoft accounts, and related products and services offered through this website (collectively, the “Services”). By using the Services, you acknowledge that you have read this Policy. If you do not agree, please stop using the relevant Services.

2. Information we collect

  • Account information: email address, display name, email verification status, account creation date, and last sign-in time. Passwords are stored only as irreversible salted hashes; we do not store plaintext passwords.
  • Google sign-in information: when you choose Google sign-in, we receive the unique Google account identifier (sub), email address, email verification status, and optional display name. We do not receive your Google password or request access to Gmail, Google Drive, Calendar, or Contacts.
  • Verification and security information: hashed email verification codes, code status, failed sign-in records, IP addresses, and request information needed to prevent abuse, investigate faults, and protect accounts.
  • Guestbook information: public messages you choose to submit, an optional name, submission time, and the IP address used to limit abuse. Messages submitted while signed in are also associated with your AlexSoft user ID. Message content, names, and user identifiers may be displayed publicly, so do not submit personal information you do not want to make public.
  • On-device information: a session cookie and an email cookie used only to render sign-in status.
  • Performance data: Cloudflare Web Analytics provides aggregate page-view and loading-performance metrics. Cloudflare states that this product does not collect or use visitors’ personal data and does not track individuals across its customers’ sites.

3. How we use information

We use this information only to create and maintain accounts, authenticate users, provide product, account, and guestbook features, send necessary verification or security messages, prevent fraud and abuse, troubleshoot problems, improve service performance, and meet applicable legal obligations. We do not sell personal information or use Google user data for advertising, advertising profiles, or training general-purpose artificial intelligence models.

4. Google user data

We request only the openid, email, and profile scopes required for sign-in. Data returned by Google is used solely to identify you, create or link an AlexSoft account, and display basic account details. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Sharing and service providers

We transfer data to trusted providers only as necessary to operate the Services:

  • Cloudflare: website hosting, network security, D1 database, KV session storage, and privacy-first website performance analytics.
  • Google: identity authentication when you actively choose Google sign-in.
  • Resend: registration, password-reset, and security-related email delivery.

We may also disclose information when required by law, necessary to protect users or the Services, or necessary for a corporate transaction, subject to applicable notice and consent requirements.

6. Cookies, local storage, and sessions

Essential cookies maintain your session and render sign-in status. Sessions normally last 24 hours without “Remember me” and 30 days when selected. Signing out clears the current session. Disabling essential cookies may prevent sign-in from working.

7. Retention

Account details are generally kept until the account is deleted. Public guestbook messages are normally retained and displayed until we hide or delete them for administration, privacy, or legal reasons. IP addresses associated with messages are used only for abuse prevention and security administration and are not displayed publicly. Verification codes, failed sign-in records, and temporary OAuth state are short-lived security data that expire or are periodically removed. Security logs and backups are retained for reasonable periods required for abuse prevention, recovery, and legal compliance. Data is deleted or de-identified when no longer needed.

8. Security and international processing

We use measures such as access controls, HTTPS, HttpOnly session cookies, encrypted transport, parameterized database queries, and validation of third-party login state and tokens. No Internet service can guarantee absolute security. Our providers may process data outside your country or region; where required, we apply safeguards under applicable law.

9. Your choices and rights

Depending on applicable law, you may request access, correction, export, or deletion of personal information; withdraw consent; or object to or restrict certain processing. You may revoke AlexSoft access in your Google Account’s third-party connection settings. Revoking Google access does not automatically delete your AlexSoft account; contact us to request deletion of the account and associated information.

10. Children

The Services are not directed to children below the age at which they may independently consent to personal-data processing in their location. Contact us if you believe a child has provided information without appropriate parental or guardian consent.

11. Changes and contact

We may update this Policy as the Services or legal requirements change and will post the new date on this page. For privacy questions or rights requests, email privacy@alexsoft.top.