In short
- Galleyleaf uses your Google access only to set up or update the book site in the project you choose.
- Your access stays in your browser tab and expires after an hour. Galleyleaf has no server and keeps no copy of it.
- Galleyleaf never sees your book, your readers or their notes.
- It keeps your sign-in (name and email) and a short note of each setup or update, to fix problems and know which sites need an update.
- It doesn't sell, share or advertise with anything about you.
Who runs Galleyleaf
Galleyleaf is a free, open source project run by one person, who maintains this site at galleyleaf.com. In this policy, "Galleyleaf", "we" and "us" mean that person. You can write to hello@galleyleaf.com about anything on this page.
What Galleyleaf does with your Google account
When you sign in on the setup page, Google asks you to let Galleyleaf see and manage your Google projects (Google calls this permission cloud-platform). The setup page uses it, from your browser, to:
- list your Google projects, so you can choose one;
- read the chosen project's current website, to tell whether it's a Galleyleaf site and which version and settings it has;
- in that project only, turn on the services the site needs, register the website, create the database, publish its security rules, turn on Google sign-in and publish the site's files.
It does nothing else with the permission. Apart from their names in that list, it doesn't read, change or delete anything in your other projects, and it can't read your email, files or anything else in your Google account. You can see exactly what it does, because the page's code runs in your browser, and the site it publishes is open source.
Where your access is kept. Google gives your browser a key, called an access token, that expires after an hour. The setup page keeps it in that browser tab only, so a reload doesn't sign you out, and sends it only to Google. It never reaches Galleyleaf. Closing the tab removes it.
Removing the access. You can remove it at any time in your Google account's third-party connections. Your site keeps working.
Galleyleaf's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What Galleyleaf keeps
Your sign-in. Like any site with Google sign-in, Galleyleaf's own Google project keeps an account for you: your name, email address, profile picture, and when you signed up and last signed in.
A note of each setup or update. When a setup or update finishes or fails, the page saves a short note: your email, your Google project's id and site address, the Galleyleaf version, whether it was a setup or an update, the date, and whether it worked. If it failed, the note also says which step failed and Google's error message.
That's all. Galleyleaf doesn't keep your access, and it never sees your book, your readers' names or emails, or their notes. Those live only in your own Google project.
How it's used
Only the person who runs Galleyleaf can read these notes. They're used to fix setup problems and to know which sites are behind the latest version. They're never sold or shared, used for advertising, or used to train AI models.
Other services involved
- Google runs Galleyleaf's site and sign-in, and stores the notes above, in the United States. Google also runs your own project, under the terms you accept when you create it. See Google's privacy policy.
- GitHub serves the files of your book site. Your browser downloads them from GitHub during setup, so GitHub sees your IP address, as any website would. See GitHub's privacy statement.
Galleyleaf uses no analytics, ads or tracking. The only thing it saves in your browser is your choice of light or dark theme, plus your access while you're setting up.
Your readers
Your readers never use Galleyleaf's site. They sign in on your book site, and what they share there (their name, email and notes) is stored in your Google project, which you control. Galleyleaf has no access to it.
How long it's kept, and deleting it
Your sign-in and your setup notes are kept while Galleyleaf runs, so it can tell which sites need an update. To have them deleted, write to hello@galleyleaf.com from the email you signed in with. They're deleted within 30 days.
To delete your book site and everything in it, delete your Google project: see how to take your book down.
Security
Galleyleaf's records can only be added by the person they're about, and read only by the person who runs Galleyleaf. Every connection uses HTTPS.
Children
Galleyleaf is meant for authors and isn't directed at children under 13.
Changes to this policy
If this policy changes, the new version goes on this page with a new date at the top.
See also the terms of service and questions about cost, privacy and security.