GitLabDonate

LEGAL

Privacy Policy

Last Updated: October 17, 2026

Service: Identity and access management, self-hosted.
Domain: https://aham.ro
Contact: contact@aham.ro

1. Introduction

Welcome to the IAM (Identity and Access Management) service operated at aham.ro. This service provides centralized user registration, authentication, and authorization for connected services including Bazar, Vokably, and other applications within the aham.ro ecosystem.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our IAM service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Username: Your unique identifier
  • Given name: Your first name
  • Family name: Your last name
  • Email address: For account verification and communication
  • Phone number: Optional contact information
  • Password: Securely hashed using Argon2 algorithm
  • Avatar: Optional profile picture

2.2 Authentication Data

When you log in, we collect:

  • Device name: The name or type of device you use
  • IP address: Your internet protocol address
  • Login timestamps: When you access the service
  • OAuth2 tokens: Access tokens, refresh tokens, and authorization grants for maintaining your session

2.3 Third-Party Authentication

When you choose to sign in with Google:

  • We receive basic profile information from Google (name, email, profile picture).
  • For complete details on cookies set during authentication, please refer to our Cookie Policy.

2.4 Service Permissions

  • Application permissions: Records of which services (like Vokably, Bazar) you’ve granted access to
  • Roles and groups: Internal access control data specific to each connected service

2.5 Advertising and Analytics Data

We use Google AdSense to serve advertisements on our Service. Google and its partners may collect and process information about your visit to this and other websites, including:

  • IP address and approximate location data
  • Device identifiers and browser information
  • Interaction data with advertisements displayed on our site

3. How We Use Your Information

We use your information to:

  • Authenticate your identity when you log in to our services
  • Authorize access to connected applications (Bazar, Vokably, etc.)
  • Issue OAuth2 tokens for secure communication between services
  • Serve advertisements and measure ad performance through Google AdSense
  • Provide customer support when you contact us at contact@aham.ro
  • Maintain service security by monitoring login attempts and detecting suspicious activity
  • Manage user permissions across different applications within our ecosystem

4. Legal Basis for Processing

We process your personal data based on:

  • Contractual necessity: To provide the authentication service you’ve signed up for
  • Legitimate interests: To maintain security, prevent fraud, and improve our services
  • Your consent: When you grant permissions to third-party applications, choose to use Google authentication, or consent to personalized advertising via third-party advertising cookies

5. Data Storage and Security

5.1 Security Measures

We implement the following security practices:

  • Password hashing: All passwords are hashed using Argon2, a strong cryptographic hashing algorithm
  • Encryption: Data is encrypted during transmission and storage
  • Access control: Role-based and group-based access control (ACL) to protect your data
  • Token management: Secure handling of OAuth2 access tokens and refresh tokens

5.2 Important Security Notice

⚠️ Please Note: This service is operated as a personal project from a home environment. While we implement industry-standard security practices including strong encryption and secure password hashing, we cannot guarantee the same level of security as enterprise-grade data centers. Use this service with this understanding in mind.

6. Cookies and Tracking Technologies

We use essential cookies for authentication and session management, as well as third-party cookies for authentication and advertising (Google AdSense).

For a complete breakdown of all cookies used, their expiration periods, legal bases, and instructions on how to manage or opt out of them, please consult our dedicated Cookie Policy.

7. Data Sharing and Third Parties

7.1 Google Identity and Google AdSense

  • Google Identity: When you choose to sign in with Google, we use Google Identity services. Google’s privacy policy applies to their processing of your data. We only receive basic profile information necessary for authentication.
  • Google AdSense: We display advertisements supplied by Google AdSense. Google uses cookies and device identifiers to serve personalized or non-personalized ads based on your web activity. You can learn more about how Google handles data by visiting How Google uses information from sites or apps that use our services.

7.2 Connected Services

When you grant permission to connected services (like Bazar or Vokably), those services receive:

  • Your basic profile information
  • OAuth2 access tokens to verify your identity
  • Permissions specific to that service

Each connected service operates under its own privacy policy.

7.3 No Selling or Unrelated Sharing

We do not sell, rent, or share your personal data with third parties for direct marketing purposes. We do not transfer your account data internationally beyond what is necessary for Google services.

8. Data Retention

We retain your personal data for as long as your account remains active. Your data is kept until you choose to delete your account. Once deleted, your personal information is removed from our systems, though we may retain certain logs for security purposes for a limited time.

9. Your Rights

Under applicable privacy regulations (including GDPR), you have the following rights regarding your personal data:

  • Right to Access: You can view your account information at any time
  • Right to Update: You can modify your profile information, change your password, and update your details
  • Right to Delete: You can delete your account and all associated data
  • Right to Download: You can request a copy of your personal data
  • Right to Revoke Permissions: You can revoke access permissions granted to connected services or withdraw advertising consent
  • Right to Opt-Out of Personalized Ads: You can manage your ad preferences via Google Ad Settings or as described in our Cookie Policy

To exercise these rights, log into your account or contact us at contact@aham.ro.

10. Children’s Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Data Protection

11.1 Multi-Tenancy

Our system uses a multi-tenant architecture where each connected service (Bazar, Vokably, etc.) operates as a separate tenant. Your permissions, roles, and groups are isolated per service.

11.2 OAuth2 Security

We implement the OAuth2 authorization framework to ensure secure token-based authentication. This means:

  • Passwords are never shared with connected services
  • Access can be revoked per application
  • Tokens have limited lifespans and can be refreshed securely

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top of this policy and notify you via email to the address associated with your account for significant updates.

Your continued use of the service after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Email: contact@aham.ro
Service URL: https://aham.ro

We will respond to your inquiry within a reasonable timeframe.

14. Additional Information

14.1 Data Controller

The data controller for your personal information is the operator of aham.ro, reachable at contact@aham.ro.

14.2 Technical Information

Our service stores the following technical data:

  • OAuth2 authorization grants
  • Refresh tokens for maintaining sessions
  • Access tokens for service authorization
  • Audit logs of authentication events

All sensitive data is protected using industry-standard encryption methods.

By using the IAM service at aham.ro, you acknowledge that you have read and understood this Privacy Policy.