Privacy Policy
Last updated: August 2026
id.daegun.dev is a personal identity service: it provides one Google sign-in for the small set of applications that run on daegun.dev domains. It is not a commercial service and is not open to the public. Google is the only way to sign in — no passwords exist here.
What we collect
When you sign in with Google, we receive your name, email address, and profile picture. That is the full extent of what sign-in requests — the Google permissions used are openid email profile only. The sign-in service itself never asks for access to your Google data (mail, calendar, files, contacts). The one exception across daegun.dev applications is Google Calendar, described in its own section below — and it is always a separate, explicit permission that an individual application asks you for, never part of signing in.
What we store
We store your account (the name, email, and picture above), a session cookie so you stay signed in (HttpOnly and Secure — there are no tracking cookies), your record of which applications you have approved, and an append-only log of authentication events: sign-ins, token issuance and revocation, and application registrations. That log records metadata only — token values and credentials never appear in it.
What applications receive
When you use this service to sign in to a daegun.dev application, that application receives your name, email address, and profile picture to identify you. What each application stores beyond that is covered by its own privacy policy.
Google Calendar access
Some daegun.dev applications offer features that work with your Google Calendar — for example showing your schedule or adding an event you asked for. An application that needs this asks you directly, on its own Google consent screen, and requests only the narrowest calendar permission its feature needs: viewing your calendar events, or viewing and editing them. Granting it is always optional and separate from sign-in.
Each application holds its own calendar access. The sign-in service never receives, stores, or passes along calendar credentials or calendar data. An application you grant access stores its credentials encrypted at rest, in its own private database, and uses your calendar data only to provide the feature you asked for — it is never used for advertising, never sold, and never shared with any third party. daegun.dev applications' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke any application's calendar access at any time from your Google account permissions page.
Sharing
Your data is not sold, shared with, or transferred to any third party. It lives in a private database hosted on Fly.io with encrypted backups on S3-compatible storage. There is no advertising and no analytics tracking.
Revocation and deletion
You can revoke this service's access to your Google account at any time from your Google account permissions page. To have your account and sign-in data removed entirely, email privacy@daegun.dev. The authentication event log is retained as the service's security audit record.