Kernel中文Kernel privacy notice
Kernel is developed by OntoVana. This notice covers the public SelfKernel website, platform account, device/domain connection coordination and relay. The organization or individual operating each connected domain is responsible for the business data and services in that domain.
Account information
With Google sign-in, we request only openid and email. We verify Google’s account identifier and verified email address and associate them with a Kernel account. We do not request access to Gmail messages, contacts, Drive files or calendars. Google credentials are entered at Google, not collected by Kernel. The sign-in token is verified on the server; it is not kept as an ongoing Google access credential.
Email verification
For email sign-in, we process your email address, verification request, expiry, verification attempts and hashed proof. Resend processes the recipient email address and the verification email, including its one-time code, to deliver it. Sending a code does not subscribe you to marketing. Codes expire after ten minutes. The application stores a hash of the code rather than the readable code; the email provider necessarily handles the readable email.
Cookies and connection records
Essential cookies keep your browser’s sign-in attempt and signed-in session secure. The browser-binding cookie lasts up to one day and account sessions up to seven days; logout invalidates the current session. We retain account identifiers, linked sign-in methods, authorized domain/device bindings, and the records needed to operate them. Connection infrastructure processes routing identifiers and technical connection information; your network address is also processed for service delivery and abuse prevention.
Purpose and access boundaries
Account data is used for sign-in, account linking, security and access to spaces you have separately been authorized to use. A platform account does not confer access to a domain’s data. Matching email addresses do not automatically merge accounts. Domain permissions remain the responsibility of the domain operator. This platform does not use Google identity data for advertising, sale or model training.
Service providers and hosting
Google provides Google sign-in; Resend delivers verification emails; Fly.io hosts the current platform website, account service and relay. These providers process the information necessary for those functions and may process it outside your country. Administrative access to platform account records is limited to operating and supporting the service. Domain operators choose their own hosting, inference and data-source services; their processing is outside this account notice.
Security and limits
The public website uses HTTPS. Session secrets and verification proofs are stored as hashes; private service credentials are kept outside the public source and pages. Domain connections use the negotiated encrypted transport and their own authorization. Encryption does not remove endpoint or administrator responsibilities: platform account metadata remains available to the account-service operator, and a domain server processes the content it serves. No absolute security guarantee is made.
Retention and your choices
Account and binding records are kept while your account and connections are maintained. Session and verification expiry limits use; expired records may remain until subsequent cleanup, and operational backups may retain earlier records until rotation. You can log out, withdraw Google access in your Google Account settings, or remove bindings through available account/domain controls. For access, correction, export or account-closure requests, contact us below. Requests are handled by a person after identity verification; an automatic account-deletion control is not currently provided. Closing a platform account does not itself delete data held by a separately operated domain.
Contact and changes
Contact kermit.jz.shao@gmail.com for questions or privacy requests. This notice is dated 11 October 2026. Changes will be published here with a new date. If Google data use expands, we will update this disclosure and request the additional consent before using that data.
Manage Google connections · Resend privacy policy · Fly.io privacy policy
Return to Kernel