Skip to main content

Privacy Policy

Last Updated: June 1, 2024

Introduction​

Welcome to the Next.js Authentication Example application ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our authentication service.

Information We Collect​

Personal Information​

When you use our authentication service, we may collect the following types of personal information:

  • Account Information: Email address, name, profile picture (when provided by authentication providers)
  • Authentication Data: Information received from third-party authentication providers (GitHub, Google, Facebook, Auth0, Keycloak)
  • Session Data: Login timestamps, session identifiers, and authentication tokens
  • Device Information: IP address, browser type, operating system, and device identifiers

Information from Third-Party Providers​

When you choose to authenticate using a third-party provider (such as GitHub, Google, Facebook, Auth0, or Keycloak), we receive information from these providers in accordance with their privacy policies and your privacy settings with them. This typically includes:

  • Your name and email address
  • Profile picture
  • Unique identifier from the provider
  • Access tokens (for authentication purposes only)

How We Use Your Information​

We use the information we collect for the following purposes:

  • To authenticate your identity and provide access to protected resources
  • To maintain and improve our authentication service
  • To detect and prevent security incidents and protect against malicious, deceptive, or fraudulent activity
  • To debug and fix issues with our service
  • To comply with legal obligations

Data Storage and Security​

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your session data is stored securely using industry-standard encryption methods.

Data Sharing and Disclosure​

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following circumstances:

  • With third-party service providers who assist us in operating our service
  • When required by law or to respond to legal process
  • To protect our rights, property, or safety, or that of our users or others

Your Rights​

Depending on your location, you may have certain rights regarding your personal information, including:

  • The right to access the personal information we hold about you
  • The right to request correction of inaccurate information
  • The right to request deletion of your information
  • The right to restrict or object to processing of your information
  • The right to data portability

To exercise these rights, please contact us using the information provided at the end of this policy.

Changes to This Privacy Policy​

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Contact Us​

If you have any questions about this Privacy Policy, please contact us at: