Privacy Policy

Scope

The public Lắng website presents a Vietnamese intergenerational memory project. The administrative area is limited to email addresses approved by an owner.

Information we collect

• When you sign in with Google: your name, verified email address, profile image, and basic Google account identifier.
• When you use the editor: drafts, revisions, media, review submissions, publishing decisions, and audit activity.
• When you visit the website: standard technical data that hosting providers may process, such as IP address, browser type, request time, requested page, and error diagnostics.

How we use information

• To verify that you are approved and apply the correct owner or editor role.
• To create, save, review, restore, and publish Lắng content.
• To protect accounts, diagnose errors, resolve editing conflicts, and maintain an audit history.
• To operate, maintain, and improve the reliability, accessibility, and security of the website.

Google user data

Lắng requests only the basic OpenID scopes needed for sign-in: openid, email, and profile. We do not read Gmail, Google Drive, contacts, calendars, or other content in your Google Account.

Google data is used only to authenticate you, display your account identity in the admin area, and enforce the approved-email list. We do not sell Google user data, use it for advertising, or transfer it to data brokers.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Sharing and service providers

Information may be processed by Google for sign-in, Convex for authentication and application data, and Vercel for website delivery. These providers process data under their own terms and security practices. We may also disclose information when required by law or when necessary to protect users and the service.

Retention and deletion

We keep account information while an account is approved and retain revision, publication, and audit history as needed to protect the integrity of the archive. Some revisions are intentionally immutable so content can be reviewed and restored.

You may request access, correction, or deletion of personal information by contacting us. We will delete or anonymize data where appropriate, except for information we must retain for valid legal, security, or audit purposes.

Security and international processing

We use encrypted connections, server-side authorization checks, an exact-email allowlist, and role-based access controls. No system can guarantee absolute security. Service providers may process data in other countries where they operate, subject to their applicable safeguards.

Children

The administrative editor is not intended for anyone under 18. The public website can be viewed without creating an account or providing information directly to Lắng.

Changes and contact

We may update this policy when features or data practices change. The latest revision date will appear at the top of this page. For privacy questions or requests, email langvietnam2026@gmail.com.