Privacy Policy · 隐私说明
This Privacy Policy explains how MacSlot ("MacSlot", "we", "us") collects, uses, stores, shares and protects personal information, including data received from Google when you sign in with Google. It applies to our website https://macslot.app and our customer area https://app.macslot.app. 中文版本见本页下方「隐私说明(中文版)」。
1. Who we are
MacSlot is operated by an individual developer under the MacSlot brand. We rent dedicated physical Mac mini computers located in our office in Dubai, United Arab Emirates, and host Mac computers owned by our customers. You can contact us about privacy at privacy@macslot.app.
2. Google user data we access
The MacSlot customer area supports sign-in with Google only. When you choose "Sign in with Google", we request only the basic openid, email and profile scopes, and we receive the following Google user data:
- your Google account identifier (a unique ID used to recognise your account when you sign in again);
- your email address, and whether Google has verified it;
- your name and the URL of your profile picture.
We do not request or access your Google password, Gmail messages, Google Drive files, contacts, calendar, or any other data in your Google account.
3. How we use Google user data
We use the Google user data listed above only to provide and improve the MacSlot service:
- to create your MacSlot account and sign you in to the customer area;
- to show your name and profile picture in the customer area and to address you in emails;
- to send you service emails about your account, quotes, invoices, payment confirmations and rental renewals;
- to keep your account secure and to resolve disputes (for example, the list of devices signed in to your account).
We do not use Google user data for advertising, for targeted, personalised, retargeted or interest-based advertising, for determining credit-worthiness or for lending purposes, for creating databases unrelated to the service, or to develop, improve or train artificial intelligence or machine-learning models. We do not sell Google user data.
MacSlot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. How we share, transfer or disclose data
We do not sell, rent or trade your personal information, and we do not transfer or disclose Google user data to third parties for purposes other than providing the MacSlot service. We share data only with the service providers we need to run the service, and only for that purpose:
- Cloudflare, Inc. hosts our website, application, database and file storage (Cloudflare Workers, D1, KV and R2) and sends our service emails (Cloudflare Email Service);
- Google LLC provides the "Sign in with Google" authentication.
We may disclose information if required by law, regulation or a valid legal request, or to protect the rights and safety of our users and of MacSlot. If MacSlot is ever transferred to a new owner, we will notify you before your data becomes subject to a different privacy policy.
5. How we protect your data
We use administrative, technical and physical safeguards to protect your personal information, including Google user data:
- all traffic to our website and customer area is encrypted with HTTPS (TLS);
- sign-in session tokens are stored only as one-way hashes, and session cookies are HttpOnly and Secure;
- remote-access credentials for the Mac assigned to you are encrypted at rest with AES-GCM;
- only authorised staff can access customer data, with role-based permissions, and every staff action is recorded in an audit log;
- we do not access the files on the Mac you rent or host, except during maintenance that you have authorised in advance.
6. Data retention and deletion
We keep personal information only for as long as needed for the purposes described in this policy, unless a longer period is required by law:
- account data, including Google user data, is kept while your account is active and deleted within 30 days after you ask us to delete your account;
- orders, invoices, payment records, uploaded payment proofs and refund records are kept for 5 years after the service ends to meet financial and tax obligations, then deleted or anonymised;
- records of signed-in devices are deleted within 90 days after the session ends or expires;
- data on the Mac you used is wiped within 7 days after your rental or hosting ends.
You can request deletion of your account and personal data, including Google user data, at any time by emailing privacy@macslot.app from the email address of your account. We will confirm and complete the deletion within 30 days, except for records we are legally required to keep. You can also revoke MacSlot's access to your Google account at any time at https://myaccount.google.com/permissions.
7. Other information we collect
- Information you provide when you apply for a rental or hosting: your name, a contact handle (Telegram, WhatsApp or email), your intended use and any notes.
- Order, rental, invoice and refund records, and the payment proof files you upload.
- Records of your consent to our Terms of Service, this Privacy Policy and our application notice (version, time and IP address).
- Information about the devices signed in to your account: browser, operating system, IP address and last activity time.
8. Cookies and analytics
After you sign in we set one strictly necessary session cookie to keep you signed in; it expires after 30 days or when you sign out. We use Cloudflare Web Analytics, which does not use cookies and does not track individuals, to count page visits, and Cloudflare Turnstile to protect our application form from bots.
9. Your rights and choices
You can review your account information, sign out other devices and turn off email notifications under "Account & Security" in the customer area. You can ask us to access, correct, export or delete your personal data by emailing privacy@macslot.app. We respond within 30 days.
10. Children
MacSlot is intended for individuals and businesses aged 18 or over. We do not knowingly collect personal information from children.
11. Changes to this policy
When we change this policy we update the version number and effective date shown on this page. If a change affects how we use Google user data or other personal information, we will tell you by email or in-app notification before the change takes effect.
12. Contact us
For any question or request about privacy, email privacy@macslot.app. Website: https://macslot.app.
隐私说明(中文版)
本隐私说明介绍 MacSlot(下称「我们」)如何收集、使用、存储、共享和保护个人信息,包括你使用 Google 登录时我们从 Google 获得的数据。适用于官网 https://macslot.app 与客户空间 https://app.macslot.app。内容与上方英文版一致。
1. 运营方与联系方式
MacSlot 由个人开发者以 MacSlot 品牌运营,提供存放在阿联酋迪拜办公室的实体 Mac mini 整机租赁,以及客户自有 Mac 的托管。隐私相关问题请联系 privacy@macslot.app。
2. 我们通过 Google 登录获取的数据
客户空间只支持「使用 Google 账号登录」。我们只请求 openid、email、profile 三个基础范围,获得:
- Google 账号的唯一标识(用于识别同一账号再次登录);
- 邮箱地址,以及 Google 是否已验证该邮箱;
- 姓名与头像图片地址。
我们不会请求或访问你的 Google 密码、Gmail 邮件、Google 云端硬盘文件、通讯录、日历或 Google 账号中的其他任何数据。
3. Google 用户数据的用途
上述数据只用于提供和改进 MacSlot 服务:创建你的账号并让你登录客户空间;在客户空间和邮件中显示你的姓名与头像;发送账号、报价、账单、付款确认、续租等服务邮件;账户安全与争议核查(例如已登录设备列表)。
我们不会把 Google 用户数据用于任何广告(包括定向、个性化、再营销或基于兴趣的广告)、信用评估或借贷、与服务无关的数据库,也不会用于开发、改进或训练人工智能或机器学习模型。我们不出售 Google 用户数据。MacSlot 对从 Google API 获得的信息的使用以及向其他应用的传输,遵守 Google API 服务用户数据政策,包括其中的「有限使用」要求。
4. 共享、转让与披露
我们不出售、出租或交换你的个人信息,也不会为提供 MacSlot 服务以外的目的向第三方转让或披露 Google 用户数据。只与运行服务必需的服务商共享,且仅用于该目的:Cloudflare(网站、应用、数据库、文件存储与服务邮件)、Google(Google 登录身份验证)。法律、法规或有效的法律要求时,或为保护用户与 MacSlot 的权利和安全时,我们可能披露信息。
5. 数据保护措施
全站使用 HTTPS(TLS)加密传输;登录会话令牌只以单向哈希存储,会话 Cookie 为 HttpOnly 与 Secure;你所用机器的远程连接凭据以 AES-GCM 加密存储;只有获授权的员工按角色权限访问客户数据,所有后台操作都有审计记录;除你事先授权的维护外,我们不访问你所租或托管的 Mac 里的文件。
6. 保存期限与删除
- 账户资料(含 Google 用户数据):账户存续期间保存,你要求删除账户后 30 天内删除;
- 订单、账单、付款记录、付款凭证与退款记录:为履行财务与税务义务,服务结束后保存 5 年,之后删除或匿名化;
- 已登录设备记录:会话结束或过期后 90 天内删除;
- 你所用机器上的数据:退租或托管结束后 7 天内清除。
你可以随时用账户邮箱发信到 privacy@macslot.app,要求删除账户与个人数据(包括 Google 用户数据),我们会在 30 天内确认并完成删除(依法须保存的记录除外)。你也可以随时在 https://myaccount.google.com/permissions 撤销 MacSlot 对你 Google 账号的访问权限。
7. 我们收集的其他信息
申请时填写的称呼、联系方式(Telegram / WhatsApp / 邮箱)、用途与备注;订单、租期、账单、退款记录与你上传的付款凭证;你同意服务条款、本隐私说明与申请须知的记录(版本、时间、IP 地址);已登录设备的浏览器、系统、IP 地址与最近活动时间。
8. Cookie 与统计
登录后我们设置一个必要的会话 Cookie 保持登录状态,退出登录或 30 天后失效。我们使用不依赖 Cookie、不追踪个人身份的 Cloudflare Web Analytics 统计访问量,并使用 Cloudflare Turnstile 防止机器人提交申请表单。
9. 你的权利
你可以在客户空间「账户与安全」查看账户信息、退出其他设备、关闭邮件通知;也可以发邮件到 privacy@macslot.app 要求查看、更正、导出或删除你的个人数据,我们会在 30 天内回复。
10. 未成年人
MacSlot 面向 18 岁以上的个人与企业,不会有意收集未成年人的个人信息。
11. 本说明的变更
更新本说明时,我们会在本页更新版本号与生效日期;如果变更涉及 Google 用户数据或其他个人信息的使用方式,会在生效前通过邮件或站内通知告知你。
12. 联系我们
隐私相关的任何问题或请求,请发邮件到 privacy@macslot.app。网站:https://macslot.app。