Privacy Policy

This Privacy Policy describes how Jess Mann ("I", "me", "my") handles information in connection with the website at jmann.me (the "Website") and any software application I publish that links to this policy, including desktop applications that connect to Google APIs (each an "Application", and together with the Website, the "Services").

I am the data controller for any personal data processed through the Services. Where an Application is open-source software that you install and run yourself, you control that software and the data it processes on your own device.

The Website is a static site. It does not have accounts, sign-in, contact forms or comment sections.

• No cookies or local storage. The Website does not set cookies or store anything in your browser.
• No analytics, advertising or tracking. There are no analytics scripts, tracking pixels, advertising networks or social media widgets.
• No third-party requests. Fonts, images and scripts are served from jmann.me itself, so loading a page does not send your information to any other company.
• Server logs. Like nearly every web server, the infrastructure hosting the Website may automatically record technical request data such as IP address, browser user agent, requested URL, referrer and timestamp. This data is used only to operate, secure and troubleshoot the Website, is not combined with other data to identify you, and is kept for a limited period (generally no longer than 30 days) unless needed to investigate abuse.

Some Applications let you connect your Google account using Google OAuth so the Application can perform actions you request, such as reading or organizing your own data. When you connect an account:

• You will see the exact permissions (scopes) requested on Google's consent screen, and the Application accesses only the data those scopes allow.
• The Application requests only the minimum access needed for the features you use.
• Data obtained from Google APIs is processed locally on your device. It is not sent to me or to any server I operate. The Application communicates directly between your device and Google.
• OAuth access and refresh tokens are stored locally on your device so you don't need to sign in each time. They are never transmitted to me.

I do not collect, receive or store your Google user data, and I do not have the ability to view it.

The Applications' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data:

• is used only to provide or improve user-facing features that are visible in the Application;
• is not transferred to others, except as necessary to provide those features, to comply with law, or as part of a merger or acquisition with notice to you;
• is not used for serving advertisements, including retargeting, personalized or interest-based ads;
• is not sold, and is not used to determine creditworthiness or for lending purposes;
• is not used to develop, improve or train generalized artificial intelligence or machine learning models; and
• is not read by humans, unless you give affirmative consent for specific data, it is necessary for security purposes such as investigating abuse, or it is required to comply with law.

Any information processed through the Services is used only to:

• deliver the Website and the features of each Application you choose to use;
• keep the Services secure and prevent abuse; and
• comply with legal obligations.

I do not sell, rent or trade personal information, and I do not use it for advertising or profiling. Where the GDPR applies, the legal bases for processing are my legitimate interest in operating and securing the Services and, for Application features, your consent and the performance of the service you requested.

I do not share personal information with third parties except:

• with infrastructure providers (such as hosting or content delivery services) that process request data on my behalf solely to serve the Website;
• when required by law, subpoena or other legal process; or
• to protect the rights, property or safety of me, users of the Services, or the public.

Website server logs are kept only as long as described above. Data an Application stores on your device remains under your control and can be deleted at any time by signing out of the Application, deleting its local data, or uninstalling it.

You can revoke an Application's access to your Google account at any time from your Google Account permissions page. Revoking access immediately prevents the Application from accessing any further Google user data.

The Website is served exclusively over HTTPS with a strict Content Security Policy, and has no databases, login or forms that could expose personal information. Applications use Google's standard OAuth flows and keep credentials on your device. No method of transmission or storage is perfectly secure, but I take reasonable measures to protect information against unauthorized access, alteration or destruction.

Depending on where you live, including under the EU/UK GDPR and U.S. state privacy laws such as the CCPA, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. Because I generally hold no personal data about you, most requests can be satisfied by confirming that fact.

To exercise a right, contact me using the details below. You also have the right to lodge a complaint with your local data protection authority.

The Services are not directed to children under 13 (or under 16 in the European Economic Area), and I do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact me and it will be deleted.

The Website may be served from infrastructure located in different countries. Where personal data is transferred across borders, it is protected by appropriate safeguards as required by applicable law.

The Website links to external sites such as GitHub, LinkedIn and Instagram, and Applications interact with Google services. Those services are governed by their own privacy policies, including the Google Privacy Policy. I am not responsible for their practices.

I may update this policy from time to time. The effective date at the top of this page shows when it was last revised. Material changes affecting how Google user data is handled will be reflected here before they take effect, and where required, your consent will be requested again.

For privacy questions or requests, send me a message on LinkedIn or open an issue on the relevant project's GitHub repository.