Privacy Policy

Logs

IndieLogin.com keeps logs of attempted and successful authentications. Properties of each log record are:

• the date of the authentication attempt
• the application identifier
• the redirect URL of the application
• the name of the provider used to authenticate (Twitter, GitHub, email, etc)
• the profile URL, email address, or PGP key URL used to authenticate
• the profile URL the user entered
• the profile URL the user's website returned
• the date of the completed authentication

Things that are not stored or logged in any way:

• users' access tokens from Twitter or GitHub
• user-entered data other than their public website URL

Data Provided to Developers

Since IndieLogin.com is a service for developers wishing to easily implement logging in to apps, this service provides some information to the developers of the applications users log in to.

After a successful authentication, this website returns the fully resolved profile URL of the user who authenticated to the developer.

If the user authenticates with an OAuth provider such as Twitter or GitHub, the access tokens and profile information from those providers are never shared with the developer. Developers may be able to see which provider and the username at that provider you used to authenticate (e.g. Twitter, GitHub, email), but will not be able to access any information in those accounts.