Privacy Policy

Last updated: August 9, 2026

Measure of Mind — Queue Studio ("the app", "we", "us") is a free, in-browser simulator for service-flow queues. We aim to collect the minimum data needed to sign you in and keep your session — nothing more. This policy explains what that is.

The short version

• We use Google Sign-In only to identify you. We receive your Google email address and public profile (name and picture).
• We do not collect, store, sell, or share your personal data for advertising, tracking, analytics, or any secondary purpose.
• Your board models stay in your browser. We don't upload or store them.

1. What we collect

When you sign in with Google, Google shares with us the information included in the openid, email, and profile scopes. That is:

• Your Google email address (used as your account identifier).
• A stable Google subject identifier ("sub").
• Your public name and profile picture, as you have set them on Google.

We do not request, and do not receive, any sensitive or restricted Google data (such as Gmail, Drive, Contacts, or financial data). We do not collect your precise location, device identifiers, or browsing history.

2. How we use your information

• To create and maintain your account and signed-in session.
• To assign an admin role if your email is on our admin list.
• To enforce access controls (for example, blocking a user or IP address if needed to protect the service).

We do not use your information to build a profile about you, to serve ads, or to train models on your personal data.

3. What we do not do

• We do not sell your data.
• We do not share your data with advertisers, data brokers, or resellers.
• We do not use your data to determine creditworthiness.
• We do not transfer your Google data to third parties, except as required by law or to operate the sign-in and session features described here.

4. Where your data is stored

• Account & session data — your email, Google subject id, name, picture, and a random session token are stored in Amazon DynamoDB (AWS) for the lifetime of your session and account. Session tokens are short-lived and stored as signed, HTTP-only cookies.
• Your board models — the simulations you build are kept in your browser (local storage / in-memory) and in files you export yourself. We never receive or store your board models on our servers.

5. Google Sign-In & scopes

We use Google OAuth 2.0 for authentication only. The scopes we request are openid, email, and profile — the narrowest scopes needed to sign you in. We comply with the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect this app from your Google account at any time in your Google Account permissions page.

6. Security

All traffic is served over HTTPS. Session cookies are signed and marked HTTP-only. Credentials are stored in AWS Secrets Manager, not in the application environment.

7. Your rights

You can request deletion of your account and session data at any time by contacting us (below). Signing out clears your current session. Disconnecting the app in your Google Account prevents future sign-ins.

8. Children

The app is not directed to children under 13, and we do not knowingly collect their data.

9. Changes

We may update this policy. We'll post changes here with a new "Last updated" date. Material changes will be noted on the home page.

10. Contact

Questions or requests? Email leif@leifkramer.com.