Privacy

When you sign up with email we store your display name, your email address and a hashed password (we never see or store the password itself). When you sign in with Google we receive your name, email address and profile picture link from Google, as described below.

We store the patches you save, including their title, notes, settings and whether they are public, unlisted or private, and the patches you like.

We also keep a session cookie so you stay signed in, and your IP address and browser details with that session and in rate-limit counters, to stop abuse.

What we access. If you choose Sign in with Google, we request only your basic Google profile: your name, your email address and your profile picture link (the openid, email and profile scopes). We do not request access to Gmail, Drive, Calendar, Contacts or any other Google service or content.

How we use it. Only to create your Patchshelf account, to sign you in, and to show your display name on patches you make public. We do not use it for advertising or marketing, we do not sell it, and we do not use it to train AI or machine-learning models.

Who we share it with. Nobody. We do not share, transfer or disclose Google user data to third parties. Our hosting provider, Cloudflare, stores and processes it on our behalf only to run the site.

How we protect it. All traffic uses HTTPS, passwords are stored hashed, sessions use secure cookies, and access to the database is limited to the site owner.

Retention and deletion. We keep it while your account exists. To have your account and all its data deleted, email hi@patchshelf.com; we will delete it within 30 days. You can also remove Patchshelf's access to your Google account at any time at myaccount.google.com/permissions.

Patchshelf's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Public patches show on the site with your display name. Unlisted patches are visible to anyone with the link. Private patches are only visible to you. Your email address is never shown to other users.

We use a session cookie that is needed to keep you signed in, and we remember your cookie choice in your browser. We use Google Tag Manager to measure how the site is used, but only if you press Accept in the cookie banner. It can set cookies and sends Google usage data such as the pages you visit and your browser type. If you decline, it never loads. You can change your choice any time with the Cookies link at the bottom of every page. We do not run advertising and we do not sell your data.

The site runs on Cloudflare (hosting, database and the Turnstile bot check on sign-up and sign-in). If you use Google sign-in, Google handles that step. Your browser loads fonts from Google Fonts.

You can delete your patches at any time. To ask what we hold about you, or to have your account and its data deleted, email hi@patchshelf.com.

If this changes in a way that matters, including how we use Google user data, we will update this page and the date above.