Privacy Policy.
How personal information is handled when you visit this website, use Utils, sign in, or contact bearaujus.
Who is responsible
Bearaujus is a personal website and collection of apps operated by bearaujus in Indonesia. In this policy, “we” and “our” refer to that operator, who determines how personal data is used for these services.
This policy covers bearaujus.com, Utils at utils.bearaujus.com, and the shared Bearaujus sign-in service. Other linked projects may have separate policies. Contact [email protected] for privacy enquiries.
Using the site and Utils
You can browse the site and use the public tools without an account. Utils processes text, files and results in your browser. Ordinary tool use does not upload these contents to Bearaujus, save them on our servers, or send them to an AI service.
Drafts live in tab memory and are lost when the page is reloaded or closed. Copy and Save write to your clipboard or device only when you choose those actions.
Your browser still makes requests to load the app and check account status. Our infrastructure and delivery provider can process connection information such as IP address, browser information, request time, requested URL and response status for delivery, troubleshooting and abuse prevention. Account requests do not include your tool inputs.
Signing in and editing your profile
Google sign-in provides a Google account identifier, email address and verification status, name, and profile image when available. Bearaujus stores account and provider-link records, your chosen display name and username, historical username claims, and authentication/session records. Authentication records can include IP address, browser information, timestamps and server-held tokens.
We do not receive your Google password or request access to your Gmail messages or Drive files.
These details let us identify your account, save your profile, keep you signed in, and recognize your account across these apps. Your email is not published as a profile label. Old usernames remain reserved to your account to prevent impersonation. Signing out ends sessions; it does not delete your account.
Cookies and browser storage
Essential cookies protect sign-in and keep sessions connected to your browser. The central sign-in session is valid for up to eight hours; individual app sessions last up to fifteen minutes and can be re-established while the central session remains valid. Sign-in transactions are short-lived.
Session expiry is an access limit, not a promise that all stored records disappear at that moment.
A small session-storage flag remembers whether this tab has already shown the loading screen. Tool drafts are not saved in local storage.
You can clear or block cookies and site storage in your browser; account features may then stop working. We do not add advertising trackers or behavioural analytics to these apps. Infrastructure providers may still process operational traffic data.
Why data is processed
Account identifiers, profile details and session records are used to establish and provide the account functions you request. Connection and security records are used for the legitimate interests of delivering a reliable service, preventing abuse and protecting accounts, with your interests and rights taken into account. Correspondence is used to answer your enquiry or carry out your request. Information may also be processed where a specific legal obligation requires it.
If a processing purpose requires consent, we must ask for that consent separately and explain how to withdraw it. Viewing this policy or accepting the Terms of Service does not provide blanket consent. Withholding information needed for an account prevents us from providing that account feature; the public site and browser tools remain available without signing in.
If you email [email protected], Cloudflare routes the message to our Gmail mailbox. Google therefore processes the message, sender details and attachments as the mailbox provider. Please send only information necessary for your enquiry, without passwords or sign-in codes.
Payments and public sharing of tool inputs are currently unavailable; any introduction of those features requires an updated disclosure before new data is collected.
Providers and disclosure
The application databases and deployment backups are stored on equipment we operate in Indonesia. Cloudflare delivers and protects site traffic and routes incoming contact emails. Google provides sign-in and the Gmail mailbox used for correspondence. These providers receive the information needed for those functions. Their privacy notices are linked below.
Google account information is used for the sign-in and profile features described here. We do not use it for advertising, sell it, or use it to train AI models. Access to Google information is subject to the Google API Services User Data Policy. Account information is shared between the Bearaujus services only as needed to provide those features, and access by the operator is limited to administration, support and security purposes.
We do not sell personal data. Disclosure may be made where required by law or where necessary and lawful to address abuse, protect rights, or respond to a security incident. GitHub, LinkedIn, Steam and other external sites apply their own terms and policies when you visit them.
Self-hosting does not mean all processing stays in Indonesia. Google and Cloudflare operate international infrastructure and may process data outside Indonesia. Their retention and processing practices are described in their policies. You may ask us about the providers and safeguards relevant to your data. Applicable cross-border protection requirements continue to apply.
Retention and security
Account and profile records remain until the account is deleted; inactivity alone does not delete an account. Old username claims are also stored to prevent impersonation. Deletion requests are handled by email and include reviewing associated profile, provider-link, session and username-claim records. Any limited retention required or permitted by law must have a specific reason, which we explain in our response.
Application logs rotate when they reach configured size limits, rather than after a fixed number of days. Deployment backups are stored locally and currently have no automatic expiry; they remain until manually removed.
A deletion request therefore requires a separate review of relevant backups, not just the live account.
We do not promise that deleting a live record immediately removes every backup copy.
Correspondence is stored in our Gmail mailbox and managed separately from application records. Its retention depends on how the correspondence is handled and the mailbox settings. Google and Cloudflare may retain their own service records under their policies. You can request details or deletion of information relating to you, subject to applicable legal conditions.
HTTPS, restricted server access, server-side token handling and protected session cookies help safeguard information. No online service guarantees absolute security. Where a personal-data breach requires notification, we will notify affected people and the competent authority within the applicable legal time limits.
Your choices and rights
You can edit your display name and username in the account dialog. Use Sign out for this browser, or Sign out everywhere to end Bearaujus sessions across apps and devices. These actions do not close your Google account or erase Bearaujus account records.
You can remove Bearaujus access through Google Account connections. This prevents further authorized access through that connection, but does not by itself delete information already stored by Bearaujus or guarantee that existing Bearaujus sessions end immediately. Use Sign out everywhere and contact us for account deletion as well.
Under applicable law, including Indonesia’s Personal Data Protection Law, you may request information, access or a copy, correction, deletion, restriction or termination of processing, withdrawal of consent, and portability where applicable. You may also object to qualifying automated decisions and seek a remedy or complain to the competent authority. These rights have legal conditions and exceptions.
Email [email protected] with your request. We may need proportionate information to verify ownership before disclosing or changing account data. We will respond within applicable legal deadlines and explain any lawful limitation.
Children
These services are intended for a general audience. The current account flow does not collect age or provide a dedicated parental-consent process. Google sign-in alone does not establish a child’s age or parental permission.
If you are a parent or guardian concerned about a child’s data, contact [email protected] so we can review the account and any required restriction or deletion. Requirements that apply to processing children’s personal data remain applicable.
Changes
The date above identifies this version. Material changes will be explained on the site or through another appropriate notice.
A new purpose requiring consent will not be covered merely by updating this page.