Privacy policy
Effective 23 October 2026.
Forepay is a demo on Stellar testnet. It shows how a creator could prove their AdSense revenue and get a USDC advance on it. No real money moves.
This policy says what Forepay reads from your Google account, what happens to it, and what becomes public.
What we ask Google for
- One permission only,
https://www.googleapis.com/auth/adsense.readonly, which is read only access to your AdSense reports. - It cannot change anything in AdSense. It cannot read your Gmail, Drive, contacts or anything else in your Google account.
- You grant it in Google's own sign in window. Forepay never sees your Google password.
What we read with it
- The list of AdSense accounts your Google account can open, and the state of the one you use, which says whether it is approved.
- One report for that account, your estimated earnings in USD for the last three complete calendar months.
What happens to the access token
When you sign in, Google gives your browser an access token.
- Your browser sends it once, over HTTPS, to our proof server at
api-forepay.jameshub.fun. - The server holds it in memory only while it makes your proof, which takes about a minute.
- It is never written to disk, a database or logs, and it is removed from any error message.
- It is never shared with anyone, and it is thrown away when the proof ends.
- Google expires it after about an hour.
You can remove Forepay's access at any time at myaccount.google.com/permissions.
What becomes public
To get an advance, you submit a proof to Stellar, a public blockchain. Forepay uses its testnet. The proof contains
- your AdSense publisher ID
- the three month date window
- the revenue figure, to the cent
- your Stellar address
Anything on the ledger is public and permanent. Nobody can delete it, not us and not anyone else.
Nothing else from the AdSense report is revealed. Not your account name, your sites or your daily figures.
What we keep
- Nothing about you in a database.
- The proof server keeps a finished proof in memory for up to one hour, so the page can collect it. Then it forgets it.
- When the server restarts, it forgets everything.
What we never do
- We don't sell Google user data.
- We don't use it for advertising.
- We don't transfer it to anyone, except the revenue figure you choose to publish on chain, as described above.
Limited Use
Forepay's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
Questions about this policy go to m.ulinasidiki@gmail.com.