Life CEO Dashboard privacy notice

This is Aylwin Wan’s private personal dashboard. Access is limited to the owner’s authorized Google identity.

Google sign-in

Google supplies a signed identity response to verify sign-in. The app verifies its signature, issuer, client identifier, expiry, verified email and a single-use browser-bound challenge. It stores the authorized email and stable Google account identifier. Name and profile picture may be included in Google’s response but are not persisted by this application.

The dashboard does not request Google passwords, passkeys, recovery codes, Gmail messages, Drive files or Calendar events. Raw Google identity responses are processed for sign-in and are not deliberately stored or logged by the application. The app does not retain Google access or refresh tokens.

Private dashboard and sessions

Dashboard entries, identity records and session records are stored in Cloudflare D1. The sign-in implementation does not send dashboard financial, health, family or journal entries to Google.

The session cookie is Secure, HttpOnly and SameSite. Only a hash of its random token is stored in D1. Sessions expire after eight hours; signing out revokes the current session. Login challenges expire after five minutes and are single use. Expired records are cleaned up during later sign-in activity.

The owner identity remains until removed administratively. The updating email can appear in dashboard state and recovery history. The app retains up to 20 dashboard recovery revisions; session expiry does not delete dashboard records or backups. Cloudflare database recovery and independently exported backups have separate retention.

Service providers and technical information

Google processes authentication activity and technical information through its sign-in service under its own policies. Cloudflare processes hosting requests, operational metadata and stored data under its applicable policies. Sign-in is not anonymous. The application does not sell Google identity data or use it for advertising, and has no added advertising or analytics integration.

Owner controls

The owner can export dashboard JSON, sign out, manage the Google connection in Google Account settings, and administer stored records and backups through the hosting account. Removing a Google connection does not itself immediately revoke an already-created dashboard session; sign out or revoke that session administratively as well. Account removal does not automatically delete separately exported backups.

This owner-only app has no public registration. Before additional people receive access, its contact, deletion and retention procedures must be reviewed. Changes to data use or requested Google permissions require an updated notice and consent where applicable.

Google privacy policy · Cloudflare privacy policy

Return to sign-in