← Back to workspace

Privacy

This is a personal workspace. Google sign-in verifies identity and controls private access using only openid and email scopes. It does not access Gmail, Drive, or other Google services.

The server verifies Google identity and allows only the designated account. Login sessions are stored on this server for up to 12 hours and are revoked on sign-out. Session cookies are HttpOnly and Secure and shared across this site's subdomains.

OAuth codes and tokens are not stored in browser local storage or forwarded as application credentials. Login attempts expire after 10 minutes. The game does not require Google sign-in.

Only hashes of résumé invitation codes are stored; expiry and revocation are enforced. Experiment passwords use salted scrypt hashes, and accounts only grant experiment access. Administrators can revoke codes or accounts at any time. Revocation blocks subsequent requests but cannot recall content already saved by a visitor.

Contact: chenlukaka@gmail.com