Your Data is Safe

Privacy Policy

Last updated: July 2026

1. Overview

CPMCHEATS Firebase Manager ("the Tool", "we", "our") is a free and open-source utility designed to help Car Parking Multiplayer players manage their game accounts. This Privacy Policy explains exactly how your data is handled when you use this website.

2. How Authentication Works

When you sign in, your email and password are sent directly from your browser to Google Firebase via an encrypted HTTPS connection. Here's the exact flow:

• You enter your email and password in the login form
• Your browser sends this data directly to identitytoolkit.googleapis.com — there is no server in between
• Google Firebase verifies your credentials and returns an authentication token
• This token is stored only in your browser's session storage, scoped to this tab
• When you log out, close the tab, or the session expires, the token is gone

At no point does this data pass through our servers. The tool is fully static — there is no backend for your credentials to touch. The JavaScript source is open and can be audited by anyone using your browser's developer tools.

3. What Data We Process

During normal operation, the Tool processes the following data, entirely client-side:

• Email address: Used only to authenticate with Google Firebase and display in your dashboard
• Password: Sent directly to Google Firebase via HTTPS. Never stored, logged, or seen by us
• Authentication token (idToken): Kept in your browser's session storage for the duration of your visit only
• Game version preference (CPM1/CPM2): Kept in memory while you use the tool
• Theme preference (dark/light): Stored in your browser's local storage for your convenience

4. What We DON'T Do

• No database: We have zero persistent storage. No MySQL, no SQLite, no JSON files for user data
• No server-side logging: There is no backend, so there is nothing to log credentials to
• No tracking: No Google Analytics, no Facebook Pixel, no third-party trackers
• No data sharing: We don't share, sell, or transmit your data to any third party except Google Firebase (for authentication)
• No registration required: We don't have a registration system. You use your existing CPM game account

5. Third-Party Services

The only third-party service we use is:

• Google Firebase Identity Toolkit: Used for email/password authentication. Their privacy policy is available at policies.google.com/privacy

We load fonts from Google Fonts for visual styling. No tracking data is sent.

6. Data Retention

Authentication tokens are stored in your browser's session storage, which is automatically destroyed when:

• You click the "Logout" button
• You close the browser tab

Theme preference is stored in local storage and stays until you clear it through your browser settings.

7. Security Measures

We implement multiple layers of security to protect your data:

• HTTPS enforcement: All connections to Google Firebase use SSL/TLS encryption
• No backend to attack: Since the tool has no server-side component handling your credentials, there is no database or session store to be breached
• Input validation: Client-side checks on email format and password length before any request is sent
• Content Security Policy: Strict CSP headers limit which domains this page can connect to
• No client-side credential persistence: Your password is never written to storage — only the short-lived Firebase token is, and only for this tab

8. How to Verify This Tool is Safe

Since this is open-source software, you can verify its safety yourself:

• Inspect the source code: View the page source and firebase.js — every request this page makes is visible
• Check network requests: Open your browser's Developer Tools (F12) and go to the Network tab. You'll see requests only to identitytoolkit.googleapis.com
• Use a test account: Create a dedicated CPM account for testing if you have concerns

9. Your Rights

Since we don't store any personal data, there is effectively nothing to delete, export, or modify on our end. However, you have the right to:

• Stop using the Tool at any time
• Clear your browser storage to remove theme preferences and any active session
• Log out to destroy your session immediately
• Request verification that no data is stored (we can confirm this publicly)

10. Reporting Security Concerns

If you discover a security vulnerability or have concerns about data handling, please contact us immediately:

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Tool after changes constitutes acceptance of the new policy.

12. Contact

For any questions about this Privacy Policy or data handling practices:

• Developer: Rick
• Telegram: @ThekingRick
• GitHub: Rickdevsolutions
• Community: t.me/cpmcheatschat

Back to CPMCHEATS Firebase Manager