Privacy policy

Whaper only keeps what it needs to open your account and run your projects.

• Your account: your email address, your name and, if you sign in with Google, the address of your Google profile picture.
• Your sessions: the browser used, the IP address and the sign-in dates, to show you your open sessions and protect your account.
• Your sign-in codes: only their hash, never the code itself. A code expires after ten minutes.
• Your projects: their name, their time zone and what you choose to track.

Whaper has no password to keep: you sign in with a code or with Google.

With "Continue with Google", Whaper only asks for your basic identity: openid, email and profile. It receives your Google ID, your email address, whether it is verified, your name and the address of your picture.

This data is used only to create your account, sign you back in and show your name and picture in the app. Whaper does not sell it, does not share it with anyone, does not use it for advertising and does not use it to train an AI model.

Whaper's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Oracle Cloud hosts the app and its database.
• Cloudflare carries traffic to Whaper and protects it.
• Resend sends the sign-in emails.
• Google is involved only if you choose to sign in with Google.

Whaper sets a session cookie, required to stay signed in, and a cookie that remembers the last project you opened. No advertising cookies, no audience measurement.

• Your account and your projects stay as long as your account exists.
• A session expires thirty days after it was last used.
• A sign-in code expires after ten minutes.

You can ask to see, correct or delete your data, and remove Whaper's access to your Google account from your Google account. For any request, write to [email protected].