Privacy Policy

This site, Stancellverse Studio (also called Stanserve, at stanserve.ddns.net), is a personal project run by John. It has a few public pages, and the rest of the site is private and by invitation only. It runs on a computer in John's home in the United States. This policy explains what information the site handles and why, in plain language.

The short version

• No advertising, no tracking cookies, no analytics services, and we never sell or rent your information.
• You can browse the public pages without signing in or giving a name.
• Signing in is only for people John has invited, and is done with a Google account.

1. Information we collect

When anyone visits

• Server access log. Our web server records, for each request, the time, your IP address, the page or file requested, the response code and size. It does not record cookies or your browser details. The log is kept in a small set of rotating files, so old entries are deleted automatically.
• Visit counts. To see how much the site is used, we keep hourly counts per page, popular pages, and a count of unique visitors per day. Unique visitors are counted using a one-way scrambled form of the IP address that changes every day and cannot be reversed or linked from one day to the next.
• Temporary limits. To stop abuse, some pages keep a short in-memory tally of requests per IP address. It is not saved to disk.

If you send us something

The contact form and the request forms on the public pages collect what you type (such as your name, email address, Minecraft username or a message) plus your IP address. We use it only to reply or act on your request. Messages are kept until John deletes them.

If you are invited and sign in

Sign-in uses Sign in with Google. We receive your Google account's permanent ID, your name and your verified email address, and nothing else (we never see your Google password). We keep them to recognise you and to match you to your invitation. We set a session cookie that keeps you signed in; it is needed for sign-in to work and is not used for tracking. We also keep a record of sign-in attempts (time, IP address, and whether it worked) for security. You can ask us to delete your account at any time.

2. Google user data

This site uses Google in two ways:

• Sign in with Google uses only the basic OpenID permissions (your account ID, name and verified email address), as described above.
• The site owner can connect his own Google account (and only his own) so the site can show him his own Google Calendar and Google Tasks (on the website and in his desktop app). This uses the Google Calendar and Google Tasks APIs. The data is shown only to him, it is held in memory briefly and not saved to a database, and access can be removed by John at any time (and at myaccount.google.com/permissions). It is not sold, not shared with other companies, not used for advertising, and not used to train AI or machine-learning models.
• The same connection can send an invitation email from the owner's own Gmail account to an address he chooses to invite. This uses the Gmail API with the permission to send email only; the site cannot read, list, search or delete any email. Only the invited address and the text of the invitation are involved, and the site keeps just a note that the invitation was sent. This information is used only to deliver the invitation, is not sold or shared, and is not used for advertising or to train AI models.

The site's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. How we use information

To run the site, keep it secure (rate limiting, sign-in checks, spotting abuse), answer messages and requests, and understand roughly how much it is used. That is all.

4. Sharing

We do not sell or rent personal information. We share information only with Google as described above, and we may disclose information if the law requires it or to protect the site and its users from abuse.

5. How long we keep it

• Access log: rotating files, old entries deleted automatically.
• Visit counts: about a year; scrambled visitor values: about a month.
• Messages, requests, and sign-in records: until John deletes them or you ask us to.

6. Security

The site uses HTTPS, sign-in attempts are rate limited, and secrets are kept outside the website's files. This is a home-hosted personal site, and no system is perfectly secure.

7. Your choices

You can ask to see, correct or delete information we hold about you using the contact form. You can clear the cookies in your browser at any time (you will be signed out).

8. Children

The public pages are open to everyone, but we do not knowingly collect personal information from children under 13 through them. If you believe a child has sent us personal information, contact us and we will delete it.

9. Changes

If we change this policy we will update the date at the top. Material changes to how Google data is used will be made here before they take effect.

10. Contact

Questions or requests: use the contact form on the Portfolio page. See also the Terms of Service.