Privacy Policy
Cascade is a demonstration project built by Gradell Technology Limited. It is not a commercial service. This page describes exactly what the running application does with your data, in plain language.
What we collect
Cascade collects only what is needed to sign you in and keep you signed in. Nothing else is gathered, and there is no analytics, advertising, or tracking of any kind on this site.
If you create an account with an email address and password, we store:
| Field | Why |
|---|---|
email | Identifies your account and is how you sign in. |
name | Shown in the console so you can see who is signed in. |
org | The organization name you typed at sign-up. Display only. |
password_hash | A bcrypt hash. Your actual password is never stored and cannot be recovered from the hash. |
created_at | When the account was made. |
If you sign in with Google, Google sends us a signed token containing your basic profile. We store:
| Field | Why |
|---|---|
email | Identifies your account. |
name | Shown in the console. |
org | Your Google Workspace domain, if you have one. |
picture | The URL of your Google profile photo. |
provider | Records that this account signs in through Google. |
created_at | When the account was made. |
Accounts created through Google are stored with no password hash at all. That is deliberate: it means the account can only ever be reached through Google, rather than becoming an email address someone can attack with password guesses.
What we ask Google for
Cascade requests three standard scopes and nothing more: openid, email, and profile. These are Google's basic sign-in scopes.
Cascade does not request, receive, or have any access to your Gmail, Drive, Calendar, Contacts, or any other Google service. It cannot read your mail or your files, because it never asks for permission to.
Where it is stored
Account records are stored in Google Cloud Firestore in the us-central1 region, inside a Google Cloud project controlled by Gradell Technology Limited. The application runs on Google Cloud Run in the same region.
Staying signed in
When you sign in, the server issues a signed token that your browser keeps in localStorage. The token expires after seven days, and signing out removes it immediately.
Cascade sets no cookies and uses no third-party trackers. Signing in with Google loads Google's own sign-in library from accounts.google.com, which is subject to Google's privacy policy.
Who we share it with
Nobody. Account data is not sold, rented, shared, or transferred to any third party. It is not used to train any model. The only party that processes it is Google Cloud, as the infrastructure the application runs on.
Deleting your account
Email samuelaleonomoh5@gmail.com from the address on the account and we will delete the record. Because Cascade is a demonstration project holding only sign-in details, deletion is complete and permanent, with no backup copy retained.
Changes
If this policy changes, the date at the top of this page changes with it.
Contact
Gradell Technology Limited
samuelaleonomoh5@gmail.com