Privacy Policy
This policy explains what personal data Rathnas collects when you use Galascribe (galascribe.com, app.galascribe.com and the comments and likes on sites built with it), what we do with it and the choices you have. Rathnas LLC (“Rathnas”) is responsible for this data. Read it with our Terms of Service.
1. What we collect
- Your GitHub profile. When you sign in, GitHub shares your account ID, username, display name and profile picture. They identify you in Galascribe and show members of your organizations who you are.
- Your email address, only if you agree. GitHub asks your permission to share your verified primary email. We keep it encrypted and use it only for account, security and service notices.
- Sign-in methods. The public part of any passkey you add (never your device’s private key), and your recovery codes, kept only in a protected one-way form.
- GitHub access. The access GitHub grants Galascribe to work on your repositories, kept encrypted and renewed as GitHub requires.
- What you make. Your sites’ settings, drafts and look, your organizations, memberships and invitations, and the history of what you publish.
- Comments and likes. If you comment on or like something on a Galascribe site, we keep the comment and its edits, your likes, and any reports or moderation decisions about them.
- Site claims. If you claim a site with your YouTube channel and choose Verify with Google, Google lets us see, once, which YouTube channels your Google account owns. Google and YouTube data explains exactly what we read and keep.
- Technical data. Our servers and providers record technical logs, such as the time, the page or action requested, your IP address and browser, to run and protect the service. Cloudflare Web Analytics counts visits to app.galascribe.com without cookies and without identifying you. If you accept, Google Analytics also counts visits and how pages are used, using cookies and a random identifier. You can change your choice at any time from “Analytics choices” in the footer.
2. How we use it
- to sign you in and keep your account secure;
- to do what you ask, such as keeping drafts, publishing to your repository and showing comments;
- to send account, security and service notices to your email, if you agreed;
- to prevent abuse, moderate content and enforce our terms;
- to understand how Galascribe is used and fix problems;
- to meet our legal obligations.
We don’t sell your personal data, share it for targeted advertising or use it to train AI models.
3. Who can see it
- Members of your organizations see your GitHub username, name and picture, and your work on the sites you share.
- Your published site is public, including everything you publish on it. You choose your repository’s visibility on GitHub.
- Comments you publish appear on that site with your name. Site owners can see and moderate comments on their sites.
- Galascribe operators can see account and site records when they need to, to run the service, answer support requests and review reported content. They see whether an email address is on file, not the address itself.
4. Service providers
We share data only with the providers that help us run Galascribe, and only what each one needs:
- GitHub: sign-in, your repositories and hosting your site on GitHub Pages.
- Cloudflare: hosting and protecting the Galascribe App, network and DNS, and, if you connect it, managing your domain’s DNS records.
- DigitalOcean: the servers, database and storage behind Galascribe.
- Brevo: sending account, security and service email.
- Google (YouTube API Services): confirming you own a YouTube channel when you claim a site.
- Google (Analytics): counting visits to the Galascribe App and how pages are used, if you accept analytics.
We may also disclose data when the law requires it, to protect someone’s safety or our rights, or as part of a merger or sale of the business, in which case we’ll tell you.
5. Google and YouTube data
Galascribe uses YouTube API Services. When you claim a site with your YouTube channel, you agree to the YouTube Terms of Service, and the Google Privacy Policy applies to the data Google holds about you.
- What we access. If you choose Verify with Google, Google asks you to give Galascribe read-only access to your YouTube account. We use it for one request that lists the IDs of the YouTube channels your Google account owns, and check that the channel the site was made from is one of them. We don’t read your videos, playlists, subscriptions, comments, analytics or anything else.
- What we keep. Only the result: that the claim was verified, when, and by which Galascribe account. We revoke the access right after the check, whatever the result, and never store your Google access token.
- The code option. If you put a code in your channel description instead, we read your channel’s public description through the YouTube Data API to find the code, and we don’t keep the description.
- Sharing. We don’t share or sell Google user data, use it for advertising or use it to train AI models, and no one at Galascribe reads it.
- Removing access. Galascribe gives the access back as soon as the check is done. You can confirm this, or remove any app’s access, on Google’s security settings page. To delete the record of your claim, write to support@galascribe.com.
Galascribe’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. How long we keep it
- Your account data, for as long as your account is open.
- When you close your account, you have 7 days to change your mind. After that, your sign-in methods, sessions, memberships and likes are deleted. Comments you published stay on their sites, credited to “Former reader” instead of your name. Your repositories and published sites stay on GitHub.
- Data exports, 7 days after they’re created.
- Your email address, until you withdraw it.
- Records we need for security, abuse prevention and legal obligations, and backups, may be kept for a limited time longer.
8. Your choices and rights
- Download a copy of your data from the Account page.
- Withdraw your email address on the Account page at any time; withdrawing deletes it.
- Remove Galascribe’s access to your repositories in your GitHub settings.
- Close your account from the Account page.
Depending on where you live, for example in the EU, the UK or California, you may have the right to access, correct, delete or move your personal data, to object to or limit how we use it, and to complain to your data protection authority. Write to support@galascribe.com and we’ll answer within 30 days. We won’t treat you differently for using these rights.
Where the GDPR applies, we use your data to provide the service you asked for, with your consent (your email address), for our legitimate interests in keeping Galascribe secure, preventing abuse and improving it, and to meet legal obligations.
9. Where data is processed
Rathnas LLC is a California company based in the United States. We and our providers may store and process data in the United States and other countries, whose data protection laws may differ from yours. We rely on our providers’ safeguards when data moves between countries.
10. Security
We encrypt data in transit, encrypt GitHub access and email addresses at rest, keep recovery codes and reader sign-ins only in a one-way form, and limit who can reach production systems. No system is perfectly secure; if you find a problem, tell us at support@galascribe.com.
11. Age requirement
Galascribe is for adults. You must be at least 18 to use it, and we don’t knowingly collect personal data from anyone under 18. If you believe someone under 18 has given us personal data, write to us and we’ll delete it.
12. Changes to this policy
When this policy changes, we’ll update the date at the top and, for significant changes, tell you in Galascribe or by email before they take effect.
13. Contact
Rathnas LLC, support@galascribe.com.