Privacy Policy

Last updated: August 2026. This policy explains how csong.in (Csong Bot) handles information when you sign in and generate upload tokens.

Data we process

• Google account profile — name, email, and uid via Firebase Authentication when you choose to sign in.
• Token records — channel link, song string, uid, timestamps, and used/unused status stored in Firestore to enforce single-use security.
• Preferences — theme and cookie consent flags in local browser storage.

What we do not collect

We do not store your Google password. We do not upload or permanently host the audio files themselves on the marketing website. Self-hosted bot sessions, if you use Connect Your Own Bot, are managed under that separate hosting flow and its documentation.

Purpose

Authentication prevents anonymous abuse. Token metadata lets the bot reject replays and keeps an audit trail for operators. Aggregate statistics (counts of tokens and users) may be shown in the live statistics panel without listing private emails publicly.

Cookies and third parties

Essential cookies/local storage remember consent and theme. Google Firebase/Auth and optional AdSense scripts may set their own cookies under their policies. You can block non-essential cookies in the browser; sign-in may stop working if storage is fully disabled.

Retention and security

Token documents remain as long as needed for abuse prevention and stats. Access is restricted by Firebase security rules. No method is perfect; protect your Google account with two-factor authentication.

Your choices

You may stop using the service and request deletion of token rows tied to your uid by contacting us with the signed-in email. Legal requests are evaluated under applicable law.

Contact

Privacy questions: WhatsApp +91 98329 62298 or the Contact page.