Sign in

The founder of ONEVAR operates this private, invite-only software test (the “Service”). This policy explains the data collected, how it is used, and your rights.

  1. 1. Overview and Data Controller

    The data controller is the founder of ONEVAR (onevar.io). No company has been incorporated. The test uses simulated accounts only: ONEVAR holds no money, is not a broker, and provides no investment advice.

    • Data controller and developer contact: support@onevar.io.
    • This policy covers Google and Apple sign-in, the application, service emails, and first-party product analytics.
    • Access is restricted to invited accounts.

  2. 2. Data collected through Google and Apple

    ONEVAR uses Google and Apple sign-in. It receives the profile data made available by the provider: Google through the openid, profile and email scopes; Apple through name and email when supplied.

    • Email address, including an Apple relay address if used
    • Name, when supplied by the provider
    • Google profile picture, when available
    • Unique Google or Apple user identifier

    ONEVAR does not request, receive, or process any sensitive data, Google Drive files, Google Contacts, or Gmail messages.

  3. 3. Other data we collect

    Beyond sign-in data, the test processes data needed to operate it:

    • Account and session data: sign-in times, session tokens and security events.
    • Language preferences, simulated account settings and simulation history.
    • Service emails, notification preferences and device push subscriptions, if enabled.
    • First-party product analytics: pages and actions, device type, browser, language, timezone, country and visitor identifier.

  4. 4. Purpose of processing

    Data is used to allow invited users to sign in, maintain sessions, associate simulation history with their accounts and send service notifications.

    • Recognise invited users and prevent unauthorised access.
    • Maintain the session and test preferences.
    • Associate simulated settings and results with the user account.
    • Send service emails and notifications and improve reliability and security.

  5. 5. Compliance with Google Limited Use requirements

    The use and transfer to other apps of information received from Google APIs by ONEVAR will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

    • ONEVAR does not sell personal data obtained through Google to third parties.
    • ONEVAR does not use Google-obtained personal data for advertising or marketing purposes.
    • ONEVAR does not transfer Google-obtained personal data to external brokers.

  6. 6. Data sharing and sub-processors

    ONEVAR does not sell, rent, or trade personal data. Data is processed only by the providers required to run the Service:

    • Lovable Cloud — hosting and database for accounts, sessions, preferences, simulations and first-party analytics.
    • Google and Apple — authentication of invited accounts.
    • Email delivery service — delivery of sign-in and service emails.

  7. 7. Cookies and tracking

    Only first-party product analytics; no advertising or third-party trackers. Functional storage maintains your session and language preference.

    • Session token — keeps you signed in securely.
    • Language preference — remembers EN or IT between visits.
    • Visitor identifier — an anonymous id used by our first-party product analytics (pages visited, device type). No advertising or third-party trackers.

  8. 7b. Product analytics

    To improve the Service and for security auditing, we record first-party activity: pages visited, sign-ins, device type, browser, language, timezone and country. IP addresses are stored only as a salted hash, never in clear, and activity rows are deleted automatically after 12 months. This data is never sold or shared with advertisers.

    • Pages visited and product actions, such as simulated account switches.
    • Device type, browser, operating system, language and timezone.
    • Country derived at the edge; IP stored hashed with a daily-rotating salt.
    • Automatic deletion after 12 months.

  9. 8. Data retention and deletion

    You may revoke ONEVAR access in your Google or Apple account settings and request deletion by contacting the founder.

    • To revoke access, remove ONEVAR from your Google or Apple account permissions.
    • To request deletion of your profile and associated data, email support@onevar.io.
    • Account and simulation data is retained for the test until deletion; security events may be retained to prevent abuse.

  10. 9. Security

    Access is restricted to your own account and authorised administrators through database access controls. Traffic is encrypted in transit. Invited users do not connect brokers; we collect no broker credentials or payment data.

  11. 10. Children's privacy

    The Service is not directed at individuals under the age of 18, and ONEVAR does not knowingly collect personal data from minors. If you believe a minor has created an account, contact us and the data will be deleted.

  12. 11. Changes to this policy

    If this policy changes, the updated version will be published on this page with a new revision date. Material changes will be announced to authenticated users before they take effect.

12. Contact

For any question about your data, this policy, or a deletion request, contact the developer responsible for data handling.

Developer Contact: support@onevar.io

← Back to ONEVAR home