What we ask Google for
When you choose “Sign in with Google” at https://app.clueless-creations.com, we request
three scopes and no others.
| Scope | What it gives us | Why we need it |
|---|---|---|
openid | A stable identifier for your Google Account | To recognise you as the same person each time you sign in, without storing a password |
email | Your email address and whether Google has verified it | To identify your account, contact you about billing and security, and create your billing record |
profile | Your display name and profile picture URL | To show you who is signed in |
We request no sensitive or restricted scopes. We have no access to Gmail, Drive, Calendar, Contacts, Photos, Chat, Cloud, or any other Google service, and we cannot read, send, or change anything in your Google Account. If you ever see Clueless Creations asking for more than the three scopes above, do not approve it and please tell us.
How we use it
Google user data is used for exactly four things, all of which are visible to you in the product:
- Creating and identifying your account. Your Google account identifier is the key your account record is attached to.
- Showing you who is signed in. Your name appears in the console header.
- Contacting you. Service, security, and billing email goes to your Google account email address.
- Billing. Your email address is used to create your customer record with our payment processor, Stripe, so a subscription can be attached to it.
That is the complete list. We do not use Google user data for advertising, for building profiles, for scoring or ranking you, or for any purpose you would be surprised by.
What we never do with it
- We never sell it. Not to anyone, in any form, for money or for anything else of value.
- We never use it to train AI models. Google user data is not used to develop, train, fine-tune, evaluate, or improve any machine-learning or artificial-intelligence model, including foundation models, and it is not stored anywhere alongside one. This holds for the raw data and for anything aggregated, anonymised, or derived from it.
- We never pass it to data brokers, ad networks, or AI model developers.
- We never use it to serve or target advertising.
- We never let humans read it except in the narrow cases Google permits: with your explicit consent, when necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data is aggregated and anonymised for internal operations.
Limited Use commitment
Clueless Creations’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google’s Limited Use requirements formally attach to restricted scopes, and we request none. We make the commitment anyway, because it describes what we actually do and because you should not have to work out which tier of Google’s policy applies in order to know whether your data is safe. Concretely, we limit our use of data received from Google APIs to providing and improving features that are visible and prominent in the product itself; to security purposes such as investigating abuse; to complying with applicable law; and, in the event of a merger, acquisition, or sale of assets, only after obtaining your explicit prior consent.
Where it is stored, and who else sees it
Your Google account identifier, email address, display name, and profile picture URL are stored in our application database, which runs on Cloudflare’s infrastructure. Your email address is also passed to Stripe to create your billing record. Those two companies are the only third parties that receive Google user data from us, and both act as our processors under contract.
Data is transmitted over HTTPS and stored encrypted at rest by our infrastructure provider. Access is limited to the people who operate the service. Full details of our subprocessors, international transfers, and security measures are in the Privacy Policy.
Google itself is not our processor for the sign-in. Google decides independently how it handles your Google Account, under Google’s Privacy Policy. This page describes what happens after Google passes data to us.
How long we keep it, and how to make us delete it
We keep Google user data for as long as your account is open, and delete it within 30 days of you closing your account. Billing records that tax law requires us to retain are kept longer, as described in the Privacy Policy.
Two separate things you can do
- Revoke our access to your Google Account. Go to myaccount.google.com/permissions, find Clueless Creations, and remove access. You will no longer be able to sign in. This stops Google sending us anything further, but it does not by itself delete what we already hold.
- Delete your account and its data. Do this from the console, or email privacy@clueless-creations.com and ask. This deletes the Google user data we hold about you.
Doing both is the complete removal. We would recommend it in that order.
Contact
Questions about this page, or about anything we hold from your Google Account, go to privacy@clueless-creations.com. The controller is Clueless Creations LLC, 2112 Woodland Ave, Park Ridge, Illinois 60068.