Notice of Privacy Policy

Google User Data — Threshold Login Guard

This section describes how Threshold Login Guard, the WordPress login-security plugin developed by Spencer Taylor (Threshold Solutions), accesses, uses, stores, and shares Google user data when a person uses its Sign in with Google feature. It applies to this website and to every website on which the plugin's Google sign-in is enabled.

What we access

Threshold Login Guard requests only two non-sensitive OpenID Connect scopes from Google:

  • openid — a stable, anonymous identifier for your Google Account.
  • email — the email address on your Google Account, and whether Google has verified it.

The plugin does not request access to Gmail, Drive, Contacts, Calendar, Photos, or any other Google service, and it cannot read, create, modify, or delete anything in your Google Account.

How we use it

The email address and identifier are used for one purpose only: to identify you and sign you in to a user account on the website you are signing in to. They are not used for advertising, profiling, or any form of marketing, and they are not used to train any model.

How we store it

Your email address and your Google account identifier are stored in the WordPress database of the individual website you signed in to. The short-lived Google token used to complete sign-in is used once and immediately discarded; it is never written to disk. Threshold Login Guard neither requests nor stores Google refresh tokens, so it has no ongoing access to your Google Account after sign-in completes.

How we share it

We do not share, sell, transfer, or disclose Google user data to any third party. No Google user data is transmitted to Spencer Taylor or Threshold Solutions from the websites where the plugin runs; the plugin has no cloud service, sends no telemetry, and loads no third-party scripts. Data leaves your browser only to reach Google and the website you are signing in to.

Retention and deletion

The stored identifier is kept for as long as your user account exists on that website. You can unlink your Google Account at any time from your WordPress profile page, which deletes the stored identifier. To have your user account and email address deleted entirely, contact the owner of that website, or use our contact page for accounts on spencer-taylor.com.

Limited Use

Threshold Login Guard's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Spencer Taylor — Threshold Solutions, South Jersey, USA. Questions about this section, or about Google user data we hold: contact page. See also our Terms of Service.