Legal

Privacy policy

Last updated 2 September 2026.

Who we are

Caiotti.Studio is the design studio of Caio Augusto Liutti. This policy covers the public site at caiotti.studio and the BrandOS dashboards hosted on subdomains of caiotti.studio (for example os.caiotti.studio).

What BrandOS login uses Google for

BrandOS dashboards are private. Invited people sign in with Google through Cloudflare Access. The Google app name is Caiotti.Studio. We request only the basic Sign-In scopes: email, name, and profile picture (openid, email, profile). We do not request Gmail, Drive, Calendar, or any other Google data.

Google is used as the identity provider. We never receive or store your Google password.

What we receive and how we use it

After you approve Sign-In, Cloudflare Access receives your Google email address, display name, and profile picture. We use that email to check that you are on the allowlist for that BrandOS (studio operator or invited client). If you are not on the list, access is denied.

We use this information only to authenticate you and keep the dashboard closed to everyone else. We do not sell it, do not use it for advertising, and do not share it with third parties except Cloudflare, which runs the login and hosting.

Cookies and session

Cloudflare Access sets a session cookie after a successful login so you do not have to sign in on every page load. The session lasts up to 30 days, then you sign in with Google again.

This public website

The pages at caiotti.studio (this policy and the homepage) do not require a Google account. They do not collect form submissions or analytics accounts. Standard hosting logs (IP, user agent, timestamp) may be processed by Cloudflare to operate the site and protect it.

Retention

Login identity lives in the Cloudflare Access session for up to 30 days. Allowlists (which emails may enter which BrandOS) are kept by the studio as part of operating the client’s workspace. We delete a person from an allowlist when the engagement ends or when they ask.

Your choices

You can revoke Caiotti.Studio’s access to your Google account in your Google Account permissions. You can also email us to be removed from a BrandOS allowlist. After that, Google Sign-In will no longer open that dashboard.

Contact

Questions about this policy or a BrandOS login: caioliutti@gmail.com.