DeMarco Home sign-in privacy policy
This policy covers Google sign-in at auth.demarcohome.com, operated
personally by Nick DeMarco for DeMarco Home.
Data received from Google
Google sign-in requests only the openid, email and profile scopes.
This provides your name, email address, Google account identifier and
profile picture address. No other Google API is accessed — this service
never requests access to Gmail, Drive, Calendar or any other Google data.
How this data is used
Your Google account is matched against an account created for you in advance, and used only to sign you in to DeMarco Home services. Google sign-in never creates a new account by itself — an account must already exist for sign-in to succeed.
Where this data is stored
Your account data is stored in the Auth database, hosted on self-hosted DeMarco Home servers. Sign-in events are also logged. Sign-in event logs are retained for 365 days, the default event retention period of the Auth service; this deployment does not override that default.
Services that receive your name and email
- Pace — project tracking
- YouTube Music likes sync
- Keystone — administrator sign-in to the secrets service (administrators only)
Your name and email address are never sold, never used for advertising, and never shared with any other third party.
Deletion and revocation
Your data is kept while your account exists. To request deletion, contact the address below. You can revoke this service's access to your Google account at any time at https://myaccount.google.com/connections.
Google API Services User Data Policy
This service's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
Effective date
This policy is effective 23 September 2026.