Privacy policy

Sign-in and accounts

Email sign-in processes your email address, codes and verification records. Google sign-in requests only your account identifier and email to verify your identity, link your account and restore purchases. It does not read Gmail messages, contacts or Drive files. Google tokens are used for that verification and are not stored persistently; your account retains your Google identifier and email.

Purchases, usage and service providers

We keep purchase and entitlement records, device authorizations, access tokens and download records for payment checks, installation and account security. Oil API account features also process balances, usage and top-ups. Stripe handles payments; this site does not store full card details.

Vercel hosts the site, Neon stores account data, Resend sends verification emails, Stripe processes payments, and Google provides sign-in verification and traffic analytics. These providers process the data needed for those purposes. Identity data from Google sign-in is used only for accounts and authorization, and is not sold or used for ad targeting.

Cookies and analytics

Cookies keep your sign-in state, language and sign-in flow, and record referral sources. Google Analytics and Vercel Analytics help us understand page visits and purchase flows. You can manage cookies in your browser; disabling sign-in cookies affects account features.

Retention, controls and contact

Account and purchase records are retained while providing the service. Sessions, verification codes and device authorizations have expiry periods. Your account page lets you revoke tokens and sign out of all devices.

To request access, correction or deletion of account data, contact hello@oiloil.org. We verify account ownership before handling requests. Records needed for payment checks, disputes or accounting may need to be retained.