Information used for sign-in
When you sign in with Google, Server Rock receives and stores your Google account's stable subject identifier, verified email address, display name, account creation time, and most recent sign-in time. The current sign-in requests only OpenID Connect identity, email, and profile scopes. Server Rock uses these details to sign you in, show your account, associate access entitlements, and provide account support. It does not request access to Gmail, Drive, contacts, or calendars.
The current web sign-in uses a signed, secure, HTTP-only, same-site session cookie that expires after 24 hours. A short-lived secure state cookie protects the sign-in callback. These cookies support authentication and are not used for advertising or cross-site tracking.
Google processes the authorization request and account authentication. See Google's Privacy Policy for Google's handling of account data.
Access, purchases, and support
Account and entitlement records are stored by the Server Rock control plane on an owner-operated host. The service checks an account's recorded entitlement before showing a gated installer. At present checkout and payment processing are disabled, so this site does not collect payment card or payment account details.
If you send a support request, Server Rock stores its subject, message, account email and display name, timestamps, and replies so the conversation can be shown to you and authorized support staff. Do not include passwords, AuthKeys, private server addresses, or other secrets in a support request. The current support inbox does not send messages to an external AI provider.
Server Rock retains account, entitlement, and support records while needed to operate the account and support service. There is no automatic deletion schedule or self-service account deletion control today. To request access, correction, or deletion, use the support contact displayed on the Google sign-in screen. Requests may require identity verification. Records that must be retained for security, dispute handling, or legal obligations may be kept as needed.
Host data and service providers
Server Rock's desktop app manages host profiles, service configuration, credentials, and backups on the computer where you run it. The public website and account service do not receive live host status or those locally stored service credentials through the current account flow.
Cloudflare provides website delivery, DNS proxying, and the encrypted tunnel to the account service. Google provides sign-in. These providers may process network and service metadata needed to deliver and secure their services, under their own terms and privacy notices. Server Rock does not use the Google sign-in token to access other Google services.
The control plane records operational request metadata for service security and reliability. Query parameters are removed from its HTTP access logs. Server Rock does not currently operate an advertising or analytics profile for website visitors.
Your choices and contact
You may stop using the site and sign out at any time. If you have an account-data request or a privacy question, contact Server Rock using the support email shown on the Google sign-in consent screen or the signed-in support inbox. A domain-based email address is not currently configured.
This notice will be updated when account, payment, analytics, AI, or hosting practices change. The privacy notice linked here and on the Google consent screen will be kept aligned.
