Privacy Policy
Last updated: September 2026
1. Who we are
FireWand is developed and operated by an individual developer, reachable at moshercode@gmail.com for any question about this policy or your data. FireWand is a web-based browser and editor for Firebase Data Connect (PostgreSQL on Cloud SQL) and Firestore, hosted at firewand.dev.
2. Google user data we access, and why
When you sign in and connect Google Cloud, FireWand requests exactly two Google OAuth scopes — never a general-purpose Google Cloud authorization:
- Your basic profile (name, email address) — via standard Google Sign-In, to identify your FireWand account.
.../auth/cloudplatformprojects.readonly— a read-only list of the Google Cloud projects you already have access to, shown to you so you can choose which one to connect. We never create, modify, or delete a project..../auth/sqlservice.admin— used to discover the Cloud SQL instance(s) in a project you've linked, and to open a database connection authenticated as you (Cloud SQL IAM authentication) — never through a shared service account. Through that connection, FireWand reads and writes the database rows and schema you explicitly view or edit in the interface.
FireWand's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
3. What we store ourselves
- Firebase identity — your name, email, and Google account ID, used to sign you in.
- Linked project metadata — which Google Cloud project IDs you've linked to your FireWand account, stored so we know what to show you on your next visit. We do not store the contents of those projects.
- Billing information — handled directly by Stripe for paid linked projects; FireWand does not store your card details, only a Stripe customer/subscription reference.
- Feedback you submit — if you use the in-app feedback form, the message text and your account are stored so we can read it.
4. What we deliberately don't store
Your Google Cloud access token is kept only in memory in your browser tab for the duration of your session — it is never written to disk, a database, or local storage, and is discarded when you close the tab, sign out, or after about an hour of use (Google's own expiry for the token). Unlike many apps that integrate with Google, FireWand also does not keep a long-lived OAuth refresh token on its servers — we never ask Google for one, so there is nothing tied to your account on our side that could grant access to your Google Cloud projects after your session ends. When your access expires, you reconnect with one click. FireWand does not store a copy of your database contents either; every read and write happens live, using your own IAM permissions, at the moment you use the interface.
5. How we use your data
We use the data described above solely to operate FireWand: authenticating you, remembering which projects you've linked, showing you the list of Google Cloud projects you can connect, enforcing the free-project/paid-project billing model, processing payments through Stripe, and reading feedback you choose to submit. We do not sell your data, share it with data brokers, or use it for advertising.
6. Data retention and deletion
We keep your account and linked-project records for as long as your FireWand account exists. You can request deletion of your FireWand account data at any time by contacting us — we will delete your User, linked-project, billing, and feedback records, and there is nothing else of yours retained on our servers (see sections 2 and 4).
7. Security
All traffic to FireWand is encrypted in transit (HTTPS). FireWand never asks for or stores a password for your Google account or your database. Every database read/write is authorized live through your own Google Cloud IAM permissions, not a shared credential FireWand controls.
8. Third-party services
- Google Cloud / Firebase — authentication and the databases you connect.
- Stripe — payment processing for additional linked projects.
9. Children's privacy
FireWand is a developer tool not directed at children, and we do not knowingly collect data from anyone under 13.
10. Your rights
You can revoke FireWand's Google Cloud access at any time from your Google Account permissions page, or by signing out of FireWand (which revokes it automatically). You can request access to, correction of, or deletion of your FireWand account data by contacting us.
11. Changes to this policy
We may update this policy from time to time; the "Last updated" date above reflects the latest revision. Continued use of FireWand after a change constitutes acceptance of the updated policy.
12. Contact
Questions about this policy or requests to access, correct, or delete your data can be sent to moshercode@gmail.com.
