← Amano

Privacy Policy

Last updated 10 September 2026

Amano is a hosted blogging platform. Publishers sign up, write posts, and Amano serves their sites on their own domains. This policy explains what we collect from the people who run those sites, and what we do with the Google account data used by the optional Search Console feature.

It does not govern what a publisher collects from their own readers. Each publisher decides what analytics, advertising and embeds run on their site, and is responsible for their own privacy notice — see Publisher sites and their readers.

What we collect

Your account

• Your name and email address, and a hashed password (we never store the password itself).
• A session cookie, so you stay signed in. It is required for the dashboard to work; there are no advertising or tracking cookies on the dashboard.
• Which sites you own or have been invited to, and your role on each.

What you publish

The posts, pages, categories, images, settings and domains you create. This is your content: we store and serve it so your site exists, and nothing else.

Google Search Console data (optional)

If you connect Google Search Console under Rankings, we store a Google OAuth refresh token for your site and read the search performance data for the property you choose. See Google user data for exactly what that means.

Technical logs

Our infrastructure provider records ordinary request data — IP address, user agent, URL, timestamp, response status — to serve requests, keep the service up and defend it from abuse. We do not build profiles from it or use it for advertising.

Google user data

Rank monitoring is optional. Nothing below happens unless you connect a Google account yourself, and it stops when you disconnect.

The one permission we ask for ishttps://www.googleapis.com/auth/webmasters.readonly — read-only access to Search Console. It cannot change or delete anything in your Search Console account. We do not request access to Gmail, Drive, Contacts, Calendar, or your Google profile beyond what is needed to complete the sign-in.

What we read and store:

• The list of Search Console properties the account can read, so you can pick the one that belongs to your site.
• For the property you pick, daily search performance rows: the search query, the page that appeared, clicks, impressions and average position. We keep the day's top queries and a row for each keyword you track.
• The OAuth refresh token, stored on our servers so the nightly sync can run. It is never sent to your browser and is not readable through the dashboard.

What we do with it: show it back to you — and only to people who are members of your site in Amano. It is not used for advertising, not sold, not shared with other publishers, not used to train any AI or machine-learning model, and not read by our staff except where you ask us for support or where we must investigate a security incident or a legal obligation.

How to stop it. Press Disconnect on the Rankings screen: we delete the stored token and ask Google to revoke it. You can also revoke it yourself at any time underGoogle Account → Third-party access. Either way the nightly sync stops immediately. The measurements already collected stay with your site until you delete them or the site, so that disconnecting does not erase your own history — ask us at king@vatih.com if you want them removed too.

How we use what we collect

• To run the service: authenticate you, serve your site, and store your content.
• To show you the reporting you asked for, such as rank monitoring.
• To keep the service secure and available, and to prevent abuse.
• To contact you about your account when something needs your attention.

We do not sell personal data, and we do not use your content or your Search Console data to train AI models.

Who else processes it

• Cloudflare — hosting, database, file storage and network protection. All of Amano runs on Cloudflare's global network, so data may be processed in whichever region serves the request.
• Google — only for the Search Console feature, and only when you connect it.

We may also disclose data where the law requires it, or where it is necessary to establish or defend a legal claim. If we are ever compelled to hand over your data, we will tell you unless we are legally prohibited from doing so.

How long we keep it

• Account and content: until you delete them, or until you close your account.
• Daily search performance rows: 180 days, after which they are deleted automatically. Google keeps roughly sixteen months of its own; we keep a shorter window of the keywords you chose.
• Google OAuth token: until you disconnect, or the grant expires or is revoked.
• Technical logs: a short operational window at our infrastructure provider.

Your choices

• Edit or delete your content at any time from the dashboard.
• Disconnect Search Console at any time, as described above.
• Ask us at king@vatih.com for a copy of your data, correction of it, or deletion of your account and everything in it. We answer within 30 days.

Security

Everything travels over HTTPS. Passwords are hashed, never stored in readable form. OAuth tokens and other credentials are held server-side and are never included in a page sent to a browser. Access to production data is limited to the people who operate the service.

No system is perfectly secure. If a breach ever affects your data, we will notify you without undue delay.

Publisher sites and their readers

Amano lets a publisher add their own advertising, analytics and embed code to their site — for example Google AdSense or a Meta pixel. Where that happens, the publisher decides what is collected from their readers and is responsible for telling those readers about it. We process it on the publisher's instructions.

Amano itself sets no advertising or tracking cookies on a published site. The only cookie it sets is the dashboard session cookie, and only for people who sign in.

Children

Amano is a tool for publishers and is not directed at children. We do not knowingly collect personal data from anyone under 13.

Changes

If we change this policy in a way that materially affects you, we will tell you before it takes effect — by email or in the dashboard. The date at the top always reflects the current version.

Contact

Questions, requests, or anything that looks wrong: king@vatih.com.