Privacy policy

Effective 17 October 2026 · Immersive Peaks LLC

Le’Kashapp is a focused connection console. It lets you connect Facebook, review the permissions Facebook granted, and see the Pages and ad accounts Facebook makes available to that connection.

Information we process

• Your Facebook user identifier and name, provided through the automatic public_profile permission.
• The permissions you grant: pages_show_list, pages_read_engagement, and ads_management.
• Page and ad-account identifiers, names, Page categories, and ad-account status returned when you view your authorized assets.
• A temporary encrypted Facebook access token, an opaque session identifier, security state used during connection, a short-lived keyed hash of your IP address for connection rate limiting, a temporary keyed hash of your Facebook identifier to prevent an older login from restoring deleted data, and deletion-receipt status.

Le’Kashapp does not request your email, Instagram data, messages, or the business_management permission. It does not maintain a database of your Page lists, ad-account lists, or advertising data.

How we use information

We use this information only to complete the Facebook connection, protect the sign-in flow, display the permissions and authorized assets available during your session, let you log out or disconnect, and respond to Meta’s signed deauthorization and deletion callbacks.

This console does not post to Pages, create or edit campaigns, change ads, or spend money. Links to Meta Business Suite and Ads Manager take you to Meta’s own services.

Storage and retention

Session records and the encrypted Facebook access token expire no later than one hour after the connection. There is no scheduled cleanup job; expired active-database rows are purged on the next service request. OAuth connection state expires after ten minutes. Rate-limit records expire after two minutes. Deletion-protection hashes expire after fifteen minutes; expired security records are purged on the next service request. A deletion receipt contains no personal data and expires after seven days.

Logout deletes the current active session immediately. Disconnect deletes all active sessions for that Facebook user immediately, and a valid signed Meta deletion callback deletes matching active records immediately. After active-database deletion, Cloudflare D1 Time Travel recovery backups may retain the deleted records for up to seven days before those backups expire.

Sharing and tracking

Le’Kashapp exchanges information with Meta only as needed for the connection and asset requests you initiate. Hosting and database processing are provided by Cloudflare. We do not sell your information. These pages contain no analytics, advertising trackers, pixels, or third-party scripts.

Security

Facebook tokens stay on the server and are encrypted at rest. Browser sessions use secure, HTTP-only cookies. The connection flow uses one-use state, a browser-binding cookie, strict redirect handling, and request protections for logout and disconnect. We do not enable application request or trace logging. Cloudflare may process connection metadata to deliver and protect the service.

Your choices

You can log out to delete the current Le’Kashapp session. You can disconnect to ask Meta to revoke Le’Kashapp’s permissions and delete every local session associated with that Facebook user. You can also remove the integration from Facebook settings. See the data-deletion instructions.

Contact

Le’Kashapp is operated by Immersive Peaks LLC. For privacy questions, email privacy@unhoard.app.