Privacy Policy

Google OAuth Scope, Data Processing & Cookies

Last updated: May 19, 2026

1. Information We Collect

We collect information to authenticate users and power the platform. When you register or log in using Google OAuth, Google provides us with your name, email address, profile picture URL, and Google user identifier. We also log courses generated, completed milestones, and community forks.

2. Google User Data Usage

Your Google profile information is strictly used to display your user profile on Merger-learn (e.g., your name, avatar, and email) and send critical account notifications. We NEVER sell, lease, or share this data with third parties. Our application is fully compliant with Google API Services User Data Policy.

3. Cookie & Session Storage

We use secure cookies and localStorage to persist your login session. This is handled by our authentication library (Better-Auth). These cookies are essential for maintaining your secure access to authenticated routes like the dashboard and course generator.

4. Data Security

We prioritize user data safety. All communication between your client and our servers is encrypted using HTTPS/TLS. Profile records and created learning courses are securely stored in our backend databases and are managed with strict database access rules.

5. Data Retention & Deletion

We keep your account information as long as your account is active. If you wish to delete your account, wipe all personal Google OAuth profile records, and remove your custom generated courses, you can do so by contacting support at legal@merger-learn.com.

For security or privacy concerns, please contact us at privacy@merger-learn.com