This policy covers jameszmapepa.dev and every application served from a subdomain of it (for example hupenyu.jameszmapepa.dev). They are personal projects built and run by James Mapepa. There is no company behind them and nothing here is sold.
The website itself
The site is static. It sets no cookies. Page views are counted with Cloudflare Web Analytics, which does not use cookies or fingerprinting and does not identify individual visitors. If you use the contact form, the name, email address and message you type are delivered to me by Web3Forms, a form relay service, and are kept only as long as our conversation needs them.
The apps on subdomains
Each subdomain app is self-hosted on my own server and protected by a login. Data you enter into an app stays on that server. It is not sent to third parties, not used for advertising, and not used to train machine learning models.
Google user data
Some apps ask you to connect a Google account so they can read and write your Google Calendar events, Google Contacts and Google Drive files, and read your email address to label the connected account. This is what happens with that data:
- Use. Google data is used only to provide the feature you connected it for: keeping the app's calendar, contacts or files in sync with your Google account. It is never used for anything else.
- Storage. Synced records live in the app's database on my server. The access and refresh tokens Google issues are encrypted with AES-256-GCM before they are stored.
- Sharing. Google data is not shared with, sold to, or transferred to anyone. No humans read it except you, and me only if you ask for help with your account.
- Deletion. Disconnecting Google inside the app deletes the stored tokens. You can also revoke access at any time from your Google Account under Security, then "Third-party apps with account access". To have synced records removed, use the app's delete function or contact me.
Use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your rights
You can ask what data an app holds about you, ask for it to be corrected or deleted, or withdraw consent, by writing to me through the contact page. I will answer within 30 days.
Changes
If this policy changes, the date at the top moves and the new text appears here. Material changes affecting a connected Google account will also be shown inside the app.