Privacy Policy
Last updated 29 October 2026
Draft for review. This text has not yet been approved by Aback Group or reviewed by a lawyer.
Aback ID is the account you use to sign in to Aback Group products. This page explains what Aback ID stores, why, and who else sees it.
What we store
- Account: your email address, whether it is verified, and the name you choose.
- Password: a one-way scrypt hash. We never store or see your password itself.
- Sessions: for each device you sign in on, when it signed in and was last active, plus the network address and browser details the request came from.
- Security events: records such as "account created", "signed in", "session ended" and "password changed", with the time. They do not contain passwords, links or tokens.
- Connected products: which Aback products you allowed to use your Aback ID, and what you allowed them to see.
Why
To sign you in, keep your account secure, let you recover it, and let Aback products know who you are when you choose to use them. We do not sell your data, use it for advertising, or build profiles of how you use different products.
What Aback products receive
A product receives information only after you allow it on the consent screen. Each product gets its own identifier for you, so products cannot match you across each other using that identifier. A product sees your email or name only if you allow the matching permission. Each product keeps its own data under its own privacy policy.
Services we use
- Cloudflare hosts Aback ID, stores its database and sends its emails.
- Have I Been Pwned checks new passwords against known data breaches. Only the first five characters of a one-way hash of the password are sent, never the password or your email.
How long we keep it
- Expired sign-in links and codes: deleted within a day of expiring.
- Sessions: deleted within a day of expiring, and never kept past 30 days from sign-in.
- Security events: one year.
Your choices
From your account page you can change your name and password, see every device you are signed in on, and sign any of them out. To ask for a copy of your data or to delete your account, contact us at the address below; self-service export and deletion are coming.
Contact
Aback Group, aback.projects@gmail.com.