Privacy Policy

1. Overview

nt93 provides sign-in and account services (password and QR-code login, OAuth-based access for connected applications, and session management) on behalf of the applications that rely on it. This policy explains what information we collect through those services, why we collect it, and the choices you have.

2. Information We Collect

• Account information — name, email address, and password (stored as a salted hash, never in plain text).
• Session and device data — sign-in timestamps, IP address, user agent, and device identifiers, used to show and let you revoke your active sessions.
• OAuth authorization data — which third-party applications you've connected and the scopes you've granted them, so you can review and revoke access at any time.
• Usage and audit logs — security-relevant events such as sign-ins, password resets, and consent grants, kept for account security and abuse prevention.

3. How We Use Information

We use this information to authenticate you, keep your account secure, operate the OAuth authorization flows that connected applications rely on, and communicate account-related notices (such as password resets and email verification). We do not sell your personal information.

4. Sharing with Connected Applications

When you authorize a third-party application through nt93, we share only the information covered by the scopes you explicitly consent to on the authorization screen. You can review and revoke any application's access at any time from Connected Apps.

5. Cookies and Sessions

We use session cookies to keep you signed in and to protect against cross-site request forgery. These cookies are required for the service to function and are not used for advertising or cross-site tracking.

6. Data Retention

We retain account and session data for as long as your account is active, plus a limited period afterward for security and audit purposes, or as required by law.

7. Your Rights

You can review, update, or delete your account information, revoke active sessions from Sessions, and revoke connected-application access at any time. Contact us if you'd like to request a copy of your data or its deletion.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

Questions about this policy can be sent to the account owner listed for the application you signed in through.