Privacy policy
Last updated October 4, 2026
Rodney is a small personal project run by one person. It uses your Google account only to tell you apart from other users. It never reads your Gmail, contacts or files, and it doesn't sell or share your information.
What Rodney is
Rodney lets you build small web pages by chatting with an AI assistant such as Claude. You sign in with Google so Rodney knows which pages are yours. This policy explains what information that involves. In it, "Rodney" means the person who runs ptkinvent.com.
Information we receive from Google
When you sign in, Google tells Rodney two things: your email address (confirmed as verified) and a stable account ID. Rodney asks Google for nothing else. It requests only the basic sign-in permissions, openid and email, and has no access to your Gmail, Drive, contacts, calendar or any other Google data.
What Rodney keeps
- An anonymous handle. Rodney turns your account ID into a short handle such as
u-3f9a1c2b7eusing a one-way hash. The handle is stored with each page you create and is shown as that page's author. It contains neither your email nor your name. - Your email address, in a private log. When you sign in, Rodney writes your email and handle to an operational log that only the person running Rodney can read. It's used to investigate abuse and fix problems, and it's deleted automatically after 90 days. It is never stored with your pages or shown publicly.
- A record of what you do. Creating, updating and deleting pages is logged with your handle, for the same 90 days.
- Sign-in tokens. Short-lived sign-in codes (about two minutes) and refresh tokens (up to 30 days) are kept in a database as one-way hashes, so they can only be used once. Access tokens aren't stored and expire after an hour.
- The pages you publish. Their files, a name, a description if you give one, and timestamps. See "Public by design" below.
Rodney does not write IP addresses to its own logs. The cloud infrastructure that delivers requests may process them as part of normal operation.
Cookies
During sign-in Rodney sets one temporary cookie, rodney_login, that expires after 10 minutes. It ties the sign-in to the browser that started it, which blocks a kind of account-linking attack. Rodney sets no analytics, advertising or tracking cookies. Pages that other people publish through Rodney are their authors' own code, and Rodney doesn't control what those pages do.
Public by design
Anything you publish is available to anyone who has the link. Don't put passwords, personal data or anything private in a page.
Who else is involved
- Google handles your sign-in and is governed by its own privacy policy.
- Amazon Web Services hosts Rodney and its data, in the United States.
- Your AI assistant (for example Claude) is a separate service that talks to Rodney on your behalf, under its own provider's terms and privacy policy.
Rodney does not sell your information, use it for advertising, or share it with anyone else, except where the law requires it.
Keeping and deleting your information
You can delete any of your pages at any time by asking your assistant to delete it, which removes the page's files. Logs delete themselves after 90 days. To have your information removed sooner, or to ask what Rodney holds about you, email the address below.
Children
Rodney isn't meant for children under 13, or under the minimum age for a Google account where you live.
Changes
If this policy changes, the date at the top will change with it.
Contact
Questions or requests: ptkinvent@gmail.com