Privacy Policy

Last Updated: May 14, 2026

Callendina Pty Ltd ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how Gatekeeper collects, uses, and discloses information when you use our authentication services.

1. Information We Collect

Gatekeeper is an identity provider for the Callendina fleet. We collect:

• Identity Information: When you sign in via Google or GitHub, we receive your email address, name, and profile picture URL.
• Session Data: We store your sign-in timestamps, IP address, and browser user-agent to manage your active sessions and prevent unauthorized access.
• Access Logs: We maintain logs of authentication requests (allow/deny) to monitor security and prevent abuse.

2. How We Use Your Information

We use this information strictly to:

• Authenticate your identity and provide access to authorized Callendina applications.
• Enforce security policies, such as rate limiting and IP blocking.
• Provide audit logs for system administrators to troubleshoot access issues.

3. Data Sharing

We do not sell your personal data. Your identity information (email and display name) is shared only with the specific Callendina applications you choose to access.

4. Cookies

Gatekeeper uses a single "gk_session" cookie to maintain your authenticated state across the Callendina fleet. This is a strictly necessary functional cookie.

5. Security

Gatekeeper employs industry-standard measures to protect your data, including encryption in transit (TLS) and secure deterministic derivation for MFA secrets.

6. Contact Us

If you have questions about your data, please contact us via callendina.com/contact.