Privacy policy

Last updated October 11, 2026

What Rodney is

Rodney lets you build small web pages by chatting with an AI assistant such as Claude. You sign in with Google so Rodney knows which pages are yours. This policy explains what information that involves. In it, "Rodney" means the person who runs ptkinvent.com.

Information we receive from Google

When you sign in, Google tells Rodney two things: your email address (confirmed as verified) and a stable account ID. Rodney asks Google for nothing else. It requests only the basic sign-in permissions, openid and email, and has no access to your Gmail, Drive, contacts, calendar or any other Google data.

What Rodney keeps

• An anonymous handle. Rodney turns your account ID into a short handle such as u-3f9a1c2b7e using a one-way hash. The handle is stored with each page you create and is shown as that page's author. It contains neither your email nor your name.
• Your email address, in a private log. When you sign in, Rodney writes your email and handle to an operational log that only the person running Rodney can read. It's used to investigate abuse and fix problems, and it's deleted automatically after 90 days. It is never stored with your pages or shown publicly.
• A record of what you do. Creating, updating and deleting pages is logged with your handle, for the same 90 days.
• Website sessions. If you sign in on the website to see your pages, a signed cookie in your browser identifies your handle and email. Nothing about the session is stored on the server.
• Sign-in tokens. Short-lived sign-in codes (about two minutes) and refresh tokens (up to 30 days) are kept in a database as one-way hashes, so they can only be used once. Access tokens aren't stored and expire after an hour.
• Data stored by apps. Some apps are given a backend that saves what their visitors enter, such as a shared to-do list. Rodney doesn't know who entered that data, and anyone with an app's link can read and change it. It is kept until the app's owner erases it or deletes the app, and then goes into backups that expire after 35 days. An app is limited to 10 collections of up to 1,000 records each. The person who runs Rodney can read all of it.
• The pages you publish. Their files, a name, a description if you give one, and timestamps. See "Public by design" below.

Rodney does not write IP addresses to its own logs. The cloud infrastructure that delivers requests may process them as part of normal operation.

Cookies

Rodney sets only the cookies it needs to sign you in, and no analytics, advertising or tracking cookies:

• rodney_login and rodney_web_login are temporary and expire after 10 minutes. They tie a sign-in to the browser that started it, which blocks a kind of account-linking attack.
• rodney_session is set if you sign in on the website (app.ptkinvent.com). It lasts 14 days or until you sign out. It holds your anonymous handle and your email address, so the website can show you which account you're signed in with. It is sent only to app.ptkinvent.com, not to the pages people publish.

Pages that other people publish through Rodney are their authors' own code, and Rodney doesn't control what those pages do.

Public by design

Anything you publish is available to anyone who has the link, and so is any data an app stores. Don't put passwords, personal data or anything private in a page or in its data.

Who else is involved

• Google handles your sign-in and is governed by its own privacy policy.
• Amazon Web Services hosts Rodney and its data, in the United States.
• Your AI assistant (for example Claude) is a separate service that talks to Rodney on your behalf, under its own provider's terms and privacy policy.

Rodney does not sell your information, use it for advertising, or share it with anyone else, except where the law requires it.

Keeping and deleting your information

You can delete any of your pages at any time by asking your assistant to delete it, which removes the page's files and any data it stored, or erase just the stored data. Visitors who entered data into someone else's app should ask that app's owner to erase it. Logs delete themselves after 90 days. To have your information removed sooner, or to ask what Rodney holds about you, email the address below.

Children

Rodney isn't meant for children under 13, or under the minimum age for a Google account where you live.

Changes

If this policy changes, the date at the top will change with it.

Contact

Questions or requests: ptkinvent@gmail.com