/ TRUST & DATA

Privacy starts
with clarity.

A proposed privacy notice for the Tracing Guatemala research application and its public information page.

DRAFT · REQUIRES REVIEW BEFORE PUBLICATION
Draft for product planning. This example must be reviewed against the actual implementation, hosting settings, account deletion process, data retention rules, and a working support contact before it is used as an official privacy policy or submitted for Google OAuth verification.

Last revised for mockup: October 31, 2026

About this public website

The KrunchyMonkey website provides information about software projects. This mockup does not include user registration, marketing forms, or custom analytics. The eventual hosting provider may process technical request information as part of delivering the site.

Google Sign-In (planned)

If Google Sign-In is enabled, Tracing Guatemala intends to use the identity information needed to verify a person and determine whether their Google account is authorized to access the private application. This may include a stable Google account identifier, email address, name, or profile picture, depending on approved scopes.

Basic sign-in does not require access to the user's Gmail messages or Google Drive files. A successful Google authentication will not, by itself, grant application access.

Private research information

Research records may contain personal and family-history information. The application is designed for restricted private hosting, separate from this public informational website. Google identity authentication is not intended to upload or share genealogy research content with Google.

Any future external integrations or changes in hosting should be assessed and documented in the final policy before release.

Sessions, retention, and your choices

When implemented, the application may use a secure session cookie to maintain authenticated access. The final notice must accurately describe session expiration, access revocation, retention periods, backup handling, and how users can request correction or deletion of their identity records.

Contact: A reachable support/privacy email address must be configured before publishing this as an official notice. For general project information, see KrunchyMonkey on GitHub.

Review before going live.

The actual security model, OAuth scopes, operator contact details, and retention policy must match the delivered implementation. Do not submit this draft as an approved public privacy policy.