ewatkins.dev

Privacy Policy

Last updated: October 17, 2026

This policy covers the sign-in used for the self-hosted services I run under ewatkins.dev, such as Keycloak (keycloak.ewatkins.dev) and the applications protected by Cloudflare Access. These are personal services, not a commercial product, and access is limited to people I have explicitly authorized.

Information collected

When you sign in with Google, these services receive only the following basic profile information from your Google account:

• Your name
• Your email address
• Your profile picture
• A unique Google account identifier

No other Google account data is requested. The services do not read your email, contacts, files, calendar or any other Google data.

How it is used

This information is used only to:

• Verify your identity when you sign in
• Decide whether your account is allowed to access a service
• Keep you signed in for the length of your session

Sharing

Your information is never sold, rented or used for advertising. It is not shared with anyone, except with the services that make sign-in work:

• Google, which handles the sign-in itself
• Cloudflare, which runs Cloudflare Access for some of these services

Storage and retention

Your account details are stored in my self-hosted Keycloak instance and in Cloudflare Access session logs, and are kept only as long as you have access. Sign-in sessions expire automatically.

Your choices

• You can revoke access at any time in your Google account under Third-party apps & services.
• You can ask me to delete your account and associated data by emailing me.

Contact

Questions or requests: eric@ewatkins.dev

Changes

If this policy changes, the updated version will be posted here with a new “Last updated” date.