Privacy & Consent

When you use SingleSign to sign in to an app, you're in control of what information that app can access. This article explains how consent works and what you can do to protect your privacy.

What is consent?

Consent is the step where you approve what an app can access. The first time you sign in to an app with SingleSign, you'll see a consent screen listing the specific categories of data (called "scopes") the app is requesting. You can choose to allow or deny the request.

What are scopes?

Scopes are categories of data that an app can request access to. Each scope corresponds to a specific type of information. An app can only access the scopes you approve.

Here's what each scope means:

Scope	What the app receives
openid	Your unique identifier (a random ID — not your password)
profile	Your display name
email	Your email address
phone	Your phone number
address	Your mailing address

What can apps see?

Apps can only see the information you explicitly approve. For example:

• If an app requests email and profile, it will receive your email address and display name — nothing else.
• If an app only requests openid, it will receive a unique identifier that confirms your identity, but no personal details.

Apps never receive your SingleSign password.

How to revoke access

If you no longer want an app to have access to your information:

1. Sign in to your SingleSign account.
2. Go to Account → Privacy → Connected Apps.
3. Find the app you want to disconnect.
4. Click "Revoke" next to the app.
5. The app will immediately lose access to your data.

If you sign in to that app again in the future, you'll be asked to re-approve permissions. Learn more about managing connected apps.

Tips for protecting your privacy

• Only approve scopes you're comfortable with. If an app is asking for more information than you think it needs, you can deny the request.
• Review connected apps regularly. Go to your Connected Apps page periodically to make sure you recognize and still use all the apps listed.
• Revoke access for apps you no longer use. There's no downside to revoking — you can always re-authorize later.

Data safety

Here's what you can count on with SingleSign:

• SingleSign never shares your password. Your password is securely hashed and never transmitted to any app.
• Apps only get what you approve. No app can access data beyond the scopes you consented to.
• You can revoke access at any time. Revoking is instant and permanent until you re-authorize.