Privacy Policy

Last updated: 2026-06-08

Beacon ("we", "our", "the service") is a milestone-driven project tracking tool. This Privacy Policy explains what personal information we collect when you use Beacon, how we use it, and the choices you have. By signing in to Beacon, you agree to the practices described below.

1. Information We Collect

When you sign in to Beacon using Google Sign-In, we collect:

Your email address — used to identify your account and associate it with the projects you own or are invited to.
Your Google account ID (the OpenID Connect sub claim) — used as a stable internal identifier for your account.

We do not request access to your Google Drive, Gmail, Contacts, Calendar, or any other Google service. We do not collect your name, profile picture, password, phone number, or location.

When you actively use Beacon, you may create project content (milestones, tasks, commit metadata, documents, retrospectives). This content is stored in your project and is treated as data you own — see Section 3.

2. How We Use Your Information

To authenticate you and grant access to projects you own or have been invited to.
To associate project entries (milestones, tasks, commits) with the account that created them.
To enforce project membership and permission boundaries.

We do not use your information for advertising, profiling, or any form of behavioral analysis. We do not sell your data.

3. Where Your Data Is Stored

Your account information and project data are stored in Google Cloud Firestore (region: us-central1) under the Beacon Google Cloud project. Access is restricted to the Beacon backend service account; no third party has access.

4. Cookies and Tracking

The Beacon web application does not use advertising cookies, analytics cookies, or any cross-site tracking technologies. We use a single first-party session token (stored in localStorage) solely to keep you signed in. We do not embed third-party trackers or analytics scripts.

5. Third-Party Sharing

We do not sell, rent, share, or otherwise disclose your data to third parties for their own purposes. The only third-party processor involved is Google Cloud Platform, which hosts the Beacon backend and database under Google's standard Data Processing Addendum.

6. Data Retention

We retain your account and project data indefinitely until you delete it, so that the historical record of your project (milestones, tasks, commits, documents) remains intact and useful. You stay in control:

You may delete any individual project at any time using the beacon project delete CLI command, which immediately removes all entries for that project from Firestore.
You may request deletion of your account and all associated projects by emailing kurogin23mech@gmail.com (see Section 7). We will action the request within 30 days.
OAuth tokens are revoked immediately upon account deletion and may also be revoked by you at any time at https://myaccount.google.com/permissions. Once revoked, Beacon can no longer act on your behalf.

Backup copies, if any, are purged within 90 days of the deletion request.

7. How to Contact Us / How to Delete Your Data

For any privacy question, data access request, or deletion request, email:

kurogin23mech@gmail.com

Please include the email address you signed in with so we can locate and remove your account.

8. Your Rights (GDPR / CCPA)

Depending on where you live, you may have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate data.
Right to erasure ("right to be forgotten") — request deletion of your data.
Right to data portability — request an export of your project data (Beacon stores project data as JSON, which we can provide on request).
Right to opt out of sale — Beacon does not sell personal data, so this is always honored by default.

To exercise any of these rights, contact us at kurogin23mech@gmail.com. EU/UK users have the right to lodge a complaint with their local data protection authority.

9. Children's Privacy

Beacon is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the service or legal requirements. When we do, we will update the "Last updated" date at the top of this page. Significant changes will additionally be announced via the Beacon project README or release notes. Your continued use of Beacon after a change constitutes acceptance of the updated policy.