Account privacy

INeedAPlusOne Accounts provides sign-in for connected INeedAPlusOne applications.

Information used for sign-in

When you continue with Google, this service receives your Google account identifier, email address, email verification status, and name. It stores the identifier needed to recognize your account, your email and name, a separate INeedAPlusOne account identifier, and the links between these records.

The service also stores session, authorization, logout-delivery, and authentication audit records needed to operate sign-in and account security.

Information shared with connected sites

When you approve sign-in to a registered application, it receives your INeedAPlusOne account identifier and the identity information requested on the approval screen, such as your email address or name. Each application manages its own permissions and other data under its own privacy information.

Google access

Sign-in requests access to your basic account identity. It does not request access to Gmail messages, Drive files, or other Google content. Google access and refresh tokens are not retained in this service's database.

Sessions and sign-out

The service uses a cookie on the account domain to recognize your signed-in browser. Connected sites use their own cookies. Central sign-out sends authenticated notifications to connected applications so they can end the associated sessions.