Dev This is not the production site. Data may be reset or wiped at any time — do not use your real account. Go to the production site alexsoft.top →

ALEXSOFT

Privacy Policy

Effective and last updated: September 18, 2026

1. Scope

This Privacy Policy applies to alexsoft.top, AlexSoft accounts, and related products and services offered through this website (collectively, the “Services”). By using the Services, you acknowledge that you have read this Policy. If you do not agree, please stop using the relevant Services.

2. Information we collect

  • Account information: email address, display name, email verification status, account creation date, and last sign-in time. Passwords are stored only as irreversible salted hashes; we do not store plaintext passwords.
  • Google sign-in information: when you choose Google sign-in, we receive the unique Google account identifier (sub), email address, email verification status, and optional display name. We do not receive your Google password or request access to Gmail, Google Drive, Calendar, or Contacts.
  • Verification and security information: hashed email verification codes, code status, failed sign-in records, IP addresses, and request information needed to prevent abuse, investigate faults, and protect accounts. Each signed-in session records its most recent IP address, browser or app identifier, and device name, shown only to you under “Signed-in devices” on your account page so you can spot and sign out devices you don’t recognize.
  • Guestbook information: public messages you choose to submit, an optional name, submission time, and the IP address used to limit abuse. Messages submitted while signed in are also associated with your AlexSoft account and publicly show your account display name at the time. Message content, names, and display names are shown publicly, so do not submit personal information you do not want to make public.
  • On-device information: a session cookie and a cookie holding your display name (or email, if no display name is set) used only to render sign-in status.

3. How we use information

We use this information only to create and maintain accounts, authenticate users, provide product, account, and guestbook features, send necessary verification or security messages, prevent fraud and abuse, troubleshoot problems, improve service performance, and meet applicable legal obligations. We do not sell personal information or use Google user data for advertising, advertising profiles, or training general-purpose artificial intelligence models.

4. Google user data

We request only the openid, email, and profile scopes required for sign-in. Data returned by Google is used solely to identify you, create or link an AlexSoft account, and display basic account details. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Sharing and service providers

We transfer data to trusted providers only as necessary to operate the Services:

  • Server hosting provider: hosts the website, account database, and server software.
  • Google: identity authentication when you actively choose Google sign-in.
  • Resend: registration, password-reset, and security-related email delivery.

We may also disclose information when required by law, necessary to protect users or the Services, or necessary for a corporate transaction, subject to applicable notice and consent requirements.

6. Cookies, local storage, and sessions

Essential cookies maintain your session and render sign-in status. A session stays valid for 90 days after it was last used and is extended automatically while you keep using it. Signing out clears the current session, and you can sign out other devices from your account page. Disabling essential cookies may prevent sign-in from working. We do not use analytics or advertising cookies.

7. Retention

Account details are generally kept until the account is deleted. Public guestbook messages are normally retained and displayed until we hide or delete them for administration, privacy, or legal reasons. IP addresses associated with messages are used only for abuse prevention and security administration and are not displayed publicly. Verification codes, failed sign-in records, and temporary OAuth state are short-lived security data that expire or are periodically removed. Security logs and backups are retained for reasonable periods required for abuse prevention, recovery, and legal compliance. Data is deleted or de-identified when no longer needed.

8. Security and international processing

We use measures such as access controls, HTTPS, HttpOnly session cookies, encrypted transport, parameterized database queries, and validation of third-party login state and tokens. No Internet service can guarantee absolute security. Our providers may process data outside your country or region; where required, we apply safeguards under applicable law.

9. Your choices and rights

Depending on applicable law, you may request access, correction, export, or deletion of personal information; withdraw consent; or object to or restrict certain processing. You may revoke AlexSoft access in your Google Account’s third-party connection settings. Revoking Google access does not automatically delete your AlexSoft account; contact us to request deletion of the account and associated information.

10. Children

The Services are not directed to children below the age at which they may independently consent to personal-data processing in their location. Contact us if you believe a child has provided information without appropriate parental or guardian consent.

11. Changes and contact

We may update this Policy as the Services or legal requirements change and will post the new date on this page. For privacy questions or rights requests, email privacy@alexsoft.top.