Privacy Policy
Privacy Policy
1. What this policy covers
This policy explains how Sakulion Maker accesses, uses, stores and shares data obtained through Google APIs. The app is operated by Hidenobu Nagai for his own personal use and for a small number of people he knows personally. It is not a commercial service.
2. Google user data the app accesses
The app acts on the Google Account that authorized it. It requests these Google OAuth scopes:
openidhttps://www.googleapis.com/auth/userinfo.profilehttps://www.googleapis.com/auth/userinfo.email
Concretely, this gives it access to:
- Email address of the signed-in Google Account, used for sign-in, access approval and role lookup
- Google Account display name and profile picture returned at sign-in (the app itself reads only the email)
3. How the data is used
The Google email is used only to sign the person in and to look up that person's access role in the app's own user table. No other Google API is called.
4. Storage and retention
- The app's own hosted Postgres database: user email, role, password hash, generation records holding the prompt text and the generated image location, daily rate-limit counters, and audit logs
- Generated images in Vercel Blob storage
- An encrypted session cookie and one browser local-storage flag for the install banner
5. Sharing and disclosure
The app does not sell, rent or trade Google user data, and it does not transfer it to anyone except the services listed below, which are the technical providers the app depends on.
- Google Gemini API — The prompt, and any optional reference image the user uploads, to generate the image.
- Google Sign-In — The sign-in request and the returned account identity.
- Vercel — Hosting, database and image storage, plus aggregated analytics.
- Sentry — Error and performance reports, configured not to attach personal data by default.
- Resend — The recipient's email address and the message, for password resets and access notices.
No Google user data is used for advertising or re-targeting, and none of it is used to determine creditworthiness or for lending purposes.
6. Limited Use
The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
7. Who can see the data
The person who signed in and the operator. No one else reads it; it is not made public and it is not shared with other users of the app.
8. Security
- The app runs under a Google Account with the authorizations that the owner granted.
- Credentials and API keys are kept in server-side secret storage or Google-managed storage, never in public files.
- Network requests are made over HTTPS.
9. Revoking access and deleting data
- Revoke the app's access at any time at myaccount.google.com/permissions. The app stops working immediately afterwards.
- Delete the app's data in the app itself, or in the storage listed in section 4.
- Data the app stored inside a Google Account is deleted by deleting it there; there is no separate copy held by the operator.
10. Changes to this policy
If the app's data handling changes, this page is updated and the "Last updated" date above changes with it. The current version is always this page.
11. Contact
Operated by Hidenobu Nagai. The support address for the app is set as the support address on the app's OAuth consent screen. You can also reach the operator through https://github.com/hidenobunagai.