Privacy Policy

When an authorised editor chooses Google Sign-In, we request only the standard OpenID Connect scopes openid, email, and profile.

• Your Google Account's stable identifier, used to link the sign-in to an editor account.
• Your email address and whether Google has verified it, used to identify you and apply account-access rules.
• Your name and profile image, used to identify you inside the private administration interface.

We use this information solely to authenticate authorised editors, create or link their Massa Crítica editor account, enforce role and permitted-domain rules, maintain a secure session, and show the editor's identity in the private administration interface.

We do not use Google user data for advertising, profiling, analytics, credit decisions, or any purpose unrelated to authentication and account administration.

We do not sell, rent, or disclose Google user data to advertisers or unrelated third parties. Data is available only to authorised Massa Crítica administrators and to Cloudflare, our infrastructure processor, to the extent necessary to host the application and its database.

We do not allow people outside the authorised editorial team to view editor account information, and we do not transfer Google user data to other applications.

The editor account record stores the Google account identifier, email address, verification status, name, and profile-image URL in the site's access-controlled Cloudflare D1 database. The Google access token and ID token are used only to complete sign-in and retrieve the profile; they are not retained after the sign-in request finishes.

Connections use HTTPS. Access to the administration area is role-restricted, OAuth requests use state validation and PKCE, sessions expire or can be revoked, and OAuth client secrets are stored as deployment secrets rather than in the public source code.

We retain an editor's Google-linked profile only while the editor account remains active or while it is needed to protect the service from abuse. OAuth authorisation state is single-use and is removed after the sign-in attempt. Session and security records expire through normal system cleanup.

To request access to or deletion of your Google-linked editor data, email contributions@massacritica.pt with the subject “Google data request” and the email address associated with the account. After verifying the request, we will remove the Google account link and applicable editor profile data from active systems within 30 days. Residual copies may remain temporarily in protected backups or security records until their normal rotation, unless longer retention is legally required.

Visitors do not need a Google account to use the public website. Like most websites, our hosting infrastructure may process technical request information such as IP address, browser details, requested pages, timestamps, and security events to deliver and protect the service.

The site also measures aggregate website usage and whether common analytics resources are blocked. These measurements are not combined with Google Sign-In data and are not used to identify authorised editors across other services.

Massa Crítica Portugal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We request the minimum information needed for editor authentication and do not request sensitive or restricted Google API scopes.

We may update this policy when the website, its authentication flow, or legal requirements change. Material changes will be published on this page with a revised update date.

For privacy questions, access requests, or deletion requests, contact contributions@massacritica.pt.