OAuth and Data Usage Policy

    Last updated May 12, 2025

    This OAuth and Data Usage Policy describes how NetFiction (doing business as NF) (“we,” “us,” or “our”) collects, uses, stores, and shares information obtained through OAuth (Open Authorization) when you choose to log in or connect your account to our Services using third-party authentication providers such as Google, Patreon, and Discord. This policy is an addendum to our main Privacy Policy.

    By using OAuth to connect to our Services, you consent to the data practices described in this policy.

    1. Scope of This Policy

    This policy applies specifically to the information we access and process when you use the following OAuth login/connection options on our Services:

    • Google Sign-In
    • Patreon Login
    • Discord Login

    2. Information We Collect Via OAuth

    When you connect your account using an OAuth provider, we may request access to certain information from your account with that provider. We are committed to requesting the minimum amount of information necessary to provide our Services. The specific information we collect depends on the provider and the permissions you grant:

    2.1. Google Sign-In

    If you choose to log in with Google, we may request access to the following information associated with your Google account:

    • Basic Profile Information: This typically includes your name (first and last), email address, and profile picture.
      • Purpose: To create and authenticate your account on our Services, display your name and profile picture within our Services, and communicate with you regarding your account or our Services (e.g., for account recovery, important updates).
    • Email Address: Your primary Google email address.
      • Purpose: Used as a unique identifier for your account, for account authentication, and for essential communications related to your account and our Services.

    Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We will not use data obtained via Google OAuth for purposes other than providing or improving user-facing features that are prominent in our application’s user interface, nor will we transfer this data to others unless necessary to provide or improve these features, comply with applicable laws, or as part of a merger, acquisition, or sale of assets with user consent.

    2.2. Patreon Login

    If you choose to log in or connect with Patreon, we may request access to the following information associated with your Patreon account:

    • Basic Profile Information: This may include your Patreon username/display name, email address, and profile picture.
      • Purpose: To create and authenticate your account on our Services, display your Patreon identity within our Services (if applicable), and for necessary communications.
    • Membership Information (if applicable and requested): Information about your membership tier(s) if you are a patron of a creator relevant to our Services.
      • Purpose: To verify access rights to specific content or features on our Services that may be linked to Patreon membership tiers.

    2.3. Discord Login

    If you choose to log in or connect with Discord, we may request access to the following information associated with your Discord account:

    • Basic Profile Information: This typically includes your Discord username, discriminator (the #number part of your tag), email address (if you grant permission), and avatar.
      • Purpose: To create and authenticate your account on our Services, display your Discord identity within our Services (if applicable), and for necessary communications.
    • Connections (if applicable and requested): Information about other accounts connected to your Discord profile (e.g., Twitch, YouTube).
      • Purpose: Only requested if directly relevant to features within our Services (e.g., displaying linked profiles). We will specify why if this scope is requested.
    • Guild (Server) Information (if applicable and requested): List of servers you are a member of, or specific roles within a server relevant to our Services.
      • Purpose: To verify membership or roles for access to specific communities or features within our Services that are integrated with Discord servers.

    3. How We Use Your OAuth Information

    The information collected via OAuth is used for the following general purposes:

    • Account Creation and Authentication: To allow you to create an account and log in to our Services without needing to create a separate password.
    • Service Provision: To provide you with the core functionalities of our Services.
    • Personalization: To personalize your experience on our Services, such as displaying your name or profile picture.
    • Communication: To send you important notices about your account, updates to our Services, or security alerts. We will not use email addresses obtained via OAuth for unsolicited marketing communications unless you have separately opted in to receive them.
    • Security: To help maintain the security and integrity of our Services.
    • Compliance with Policies: To ensure adherence to the policies of the respective OAuth providers (Google, Patreon, Discord) and applicable laws.

    4. Data Sharing and Disclosure

    We do not sell personal information obtained through OAuth login services.

    We will not share the specific information obtained through Google, Patreon, or Discord OAuth with third parties for their own marketing or advertising purposes without your explicit consent.

    We may share your OAuth-derived information only in the following limited circumstances:

    • With Service Providers: We may share information with third-party service providers who perform services on our behalf (e.g., hosting, security, customer support), but only to the extent necessary for them to perform these services and under strict confidentiality obligations.
    • For Legal Reasons: If required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of NF, our users, or others.
    • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such deal and outline your choices in that event.

    5. Data Security

    We implement appropriate technical and organizational security measures designed to protect the security of any personal information we process, including information obtained via OAuth. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk.

    6. Data Retention

    We retain information collected through OAuth for as long as your account with us is active or as needed to provide you Services. If you choose to disconnect your OAuth provider or delete your account with us, we will take steps to delete or anonymize your OAuth-derived information in accordance with our standard data retention policies and applicable laws, unless we are legally required to retain it for a longer period (e.g., for legal, tax, or accounting purposes).

    7. Your Rights and Choices

    You have control over the information you share with us via OAuth:

    • Managing Permissions: You can review and manage the permissions you have granted to our application at any time through your account settings on the respective OAuth provider’s platform:
      • Google: Google Account Permissions
      • Patreon: Check your Patreon “Connected Apps” or “Authorized Apps” settings.
      • Discord: Check your Discord “Authorized Apps” settings.
    • Disconnecting Your Account: You can disconnect our Services from your Google, Patreon, or Discord account at any time via the settings on those platforms. Disconnecting will stop us from accessing further information from that provider but will not automatically delete information we have already collected.
    • Accessing or Deleting Your Information: To request access to, or deletion of, the personal information we hold about you that was obtained via OAuth, please contact us using the details below. We will respond to your request in accordance with applicable law.

    8. Children’s Privacy

    Our Services are not intended for individuals under the age of 13 (or a higher age threshold if applicable in your jurisdiction for services that process personal data). We do not knowingly collect personal information from children via OAuth or otherwise. If we become aware that we have inadvertently collected personal information from a child under the relevant age without verifiable parental consent, we will take steps to delete such information promptly.

    9. Changes to This OAuth and Data Usage Policy

    We may update this OAuth and Data Usage Policy from time to time. The updated version will be indicated by an updated “Last updated” date. We encourage you to review this policy frequently to be informed of how we are protecting your information.

    10. Contact Us

    If you have questions or comments about this OAuth and Data Usage Policy, or our data practices related to OAuth integrations, please contact us at:

    NetFiction (NF)
    Email: support@netfiction.ink

    Note