Privacy Policy

ChiraOS — chiraos.my.id · Last updated 31 October 2026

ChiraOS is a private, self-hosted dashboard operated by an individual on a home server. This page explains what happens to your data when you sign in.

1. What is collected

• Google account email address — obtained only when you choose to sign in with Google, so the operator knows who requested access.
• Google account identifier (the opaque subject ID) — used to keep your sign-in session valid.
• Access log — timestamp, IP address and browser user-agent of each sign-in attempt.

No password, contact list, calendar, files, or any other Google data is requested or received. The application requests only the openid, email and profile scopes.

2. Why it is collected

The email address is recorded solely to identify visitors and control access to the dashboard. Access logs exist to detect abuse and to keep the service secure. Data is never used for advertising, profiling, or analytics.

3. How it is stored

Data is stored on the operator's own server. Sign-in sessions are held in a signed, HttpOnly cookie in your browser and expire after 7 days. The email address and access log entries remain in the server's log files.

4. Sharing

Data is not sold, rented, or shared with third parties. The only external party involved is Google, and only for the sign-in step itself. The server is reached through Cloudflare, which processes requests in transit as a network provider.

5. Your choices

You may request deletion of your recorded email address at any time by contacting the operator. You can also revoke ChiraOS's access to your Google account from Google Account permissions.

6. Cookies

Only strictly necessary cookies are set: one for the Google sign-in gate and one for the dashboard session. No tracking or advertising cookies exist.

7. Contact

Questions about this policy: contact the site operator through the sign-in page.