Privacy Policy

When you use MagicTools, we may collect the following information:

• Account information: If you sign in with GitHub or Google OAuth, we receive your name, email address, and profile avatar from the OAuth provider. We store this to manage your account.
• Usage data: We store records of content you create, such as shared Markdown documents, uploaded images, and related metadata (titles, timestamps, view counts).
• Server logs: Like most websites, our servers automatically record your IP address, browser type, and pages visited. These logs are used for security and debugging only.
• Cookies and sessions: We use database-backed sessions to keep you signed in. Session cookies expire after 30 days.

We do not use tracking pixels, third-party analytics scripts, or cross-site behavioral tracking.

We use the data we collect solely to operate and improve MagicTools:

• Authentication: Your OAuth profile data is used to create and manage your account.
• Service delivery: Your shared content and upload records are stored so you can manage them in your dashboard.
• Security: Server logs help us detect abuse and protect our infrastructure.
• Rate limiting: We track daily upload counts per user to enforce fair-use limits.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

MagicTools integrates with a small number of trusted third-party services:

• GitHub OAuth / Google OAuth: Used for user authentication. When you sign in, you are subject to GitHub's and Google's respective privacy policies.
• Tencent Cloud COS (Cloud Object Storage): Images you upload are stored on Tencent Cloud's infrastructure. Files are served via CDN for fast global access.
• Vercel / Server hosting: Our application is hosted on server infrastructure. Standard server-level logging may apply.

We encourage you to review the privacy policies of these providers if you have concerns about their data practices.

• Sessions: Active sessions expire automatically after 30 days of inactivity.
• Shared content: Your shared documents remain available until you delete them from your dashboard.
• Uploaded files: Upload records and associated files are retained until you delete them. Files stored on Tencent Cloud COS follow their standard retention policies.
• Account data: If you request account deletion, we will remove your profile information and associated content within 30 days.

You have the right to:

• Access the personal data we hold about you.
• Delete your account and associated data by contacting us.
• Export your shared content from your dashboard at any time.
• Opt out of any non-essential data collection (note: we currently do not engage in non-essential tracking).

To exercise any of these rights, please contact us at the email address below.

If you have questions, concerns, or requests regarding this privacy policy or your personal data, please reach out to us:

Email: cooconsbit@gmail.com

We aim to respond to all privacy inquiries within 5 business days.