What mazenet collects, and why.

Last updated 2026-09-05

mazenet runs application network infrastructure for a small number of people and services. This policy covers the public site at mazenet.org and sign-in at auth.mazenet.org, including sign-in with a Google account.

Who is responsible

mazenet, reachable at admin@mazenet.org, is the controller of the personal data described here. Write to that address for any question, request or complaint about your data.

The public site

Visiting mazenet.org sends the usual request data to our hosting provider, Cloudflare: your IP address, browser user agent, the page requested and the time. Cloudflare keeps this in short-lived operational logs. We do not run analytics, advertising or tracking scripts, and the site sets no cookies. Your theme preference, if you change it, is stored only in your own browser.

Signing in

Sign-in is handled by our identity service at auth.mazenet.org. When you create an account or sign in, it stores:

your e-mail address, and your given and family name if provided,
the credentials you register, such as a password hash or a passkey public key,
the time and IP address of sign-in attempts, kept for security monitoring,
the roles and groups an administrator assigns to your account.

Sign in with Google

If you choose to sign in with Google, Google sends us your Google account identifier, e-mail address, name and profile picture. We use these only to create or match your mazenet account and to show your name in the applications you use. We request no other Google scopes, do not read your Google data beyond that basic profile, and do not use Google user data for advertising, profiling or resale.

A new account created this way has no access to anything until an administrator grants it. You can disconnect Google from your account at any time on your account page at auth.mazenet.org, and you can revoke mazenet's access from your Google account settings. Google's own handling of your data is described in Google's privacy policy.

What we use the data for

authenticating you and authorising what you can reach,
keeping the services secure, including detecting abuse and investigating incidents,
contacting you about your account when necessary.

We do not sell personal data, and we do not share it with third parties except the providers that host the infrastructure, who process it on our behalf.

Retention

Account data is kept while the account exists and is deleted when the account is deleted. Sign-in and security logs are kept for up to 90 days. Encrypted backups of the identity service may retain data for a further 30 days before they roll off.

Your rights

You can see and change your name and credentials on your account page. You can ask us to export, correct or delete your data, or to close your account, by writing to admin@mazenet.org. We answer within 30 days. If you are in the EU or UK you also have the right to complain to your data protection authority.

Changes

When this policy changes, the date at the top changes with it. Material changes are announced to account holders by e-mail.