Devraa ID is the sign-in service used by websites built by Devraa. It exists so those websites can offer "Sign in with Google" without each of them holding its own copy of Google credentials.
What we receive
When you choose to sign in with a provider, and after you approve it there, the provider sends us your email address, your name, and your profile picture URL. We never see your password.
What we do with it
We pass it to the website you were signing in to, and we do not keep it. There is no user account here, no profile, and no record of your email address in readable form.
What we keep
We keep a short technical log of sign-in attempts containing:
- which website made the request
- which provider was used
- whether it succeeded, and if not, why
- the time and the originating IP address
- a one-way cryptographic hash of the email address, which cannot be reversed to reveal it
The hash exists so we can tell repeated attempts apart while debugging or investigating abuse. It cannot be turned back into your address.
Who we share it with
Only the website you were signing in to. We do not sell data, we do not use it for advertising, and we do not share it with anyone else.
Your account and your data
Because we hold no account for you, requests to access, correct or delete your data belong with the website you signed in to — it is the one holding your account. See data deletion.
Contact
Questions about this policy: [email protected].