Mcoogle

What works today

Organize manually entered accounts and subscriptions, review possible plan overlap, scan imported connection lists and email headers, and use a device-local encrypted credential vault. Discovery results are evidence to review, not verified account ownership or proof of duplicate billing.

Email/password sign-in is backed by Mcoogle’s Supabase Auth project. Google and Microsoft provider connection paths are installed and become active after provider credentials are enabled. Mcoogle does not merge provider accounts, bypass their authentication, cancel subscriptions, or revoke permissions.

Install on Windows

Open this site in Microsoft Edge while online and signed in. If Edge offers app installation, use the address-bar install control or the browser’s Apps menu. An Install Mcoogle button also appears when the browser supplies an install prompt.

Anyone can visit. Each signed-in user starts with an empty workspace. This preparation release has not been packaged, certified, or published in the Microsoft Store.

How this version handles your data

This beta receives your Mcoogle user ID, email and optional name after sign-in. The ID scopes your cloud records; email and name are display information, not proof of ownership of other accounts. Do not put passwords, API keys, payment cards or regulated data into inventory or reports. No advertising or analytics tracker is added by this app.

Inventory and activity

Inventory is saved to your signed-in account in the cloud, not end-to-end encrypted. Wait for “Saved to your account” before leaving. Conflicting changes are rejected; export pending changes before reloading. Recent local activity is session-only.

Credential vault

Separated by signed-in user ID and encrypted locally using AES-256-GCM with a key derived from your master password through PBKDF2-SHA256. The app does not send the vault or master password to its server. Backups need the original master password; there is no recovery service. A device-local vault is not a substitute for a security-reviewed password manager.

Cloud-saved records

Inventory, provider identity metadata, identity activity, account-health reviews, and explicitly saved discovery reports are stored in the app’s Cloudflare D1 database and scoped to the signed-in user. Infrastructure providers may process requests and operational logs.

Imported evidence

Discovery files are read in browser memory, not uploaded as raw files. Saving a report sends derived app names, email labels, evidence descriptions, reported permissions, and review decisions to the app server.

Sign-in

Supabase Auth handles email/password sessions for new users. Google and Microsoft OAuth entry points are present and require provider credentials to be enabled before social login can complete. Identity-only tokens are validated server-side and not retained by this application after verification.

Offline behavior

An offline notice is available after the service worker has been registered. Private pages, APIs, and vault contents are not placed in the service-worker cache. Cloud operations need an internet connection.

Backups, domain changes & removal

The original chatgpt.site address and mcoogle.com have separate local vault storage. Legacy preview data is not automatically assigned to a user. Use Settings → Export inventory and Encrypted vault backup at the original address, then import/restore at the new address. Vault restore only works where there is no existing vault; never clear the original until you have verified the backup.

Removing an inventory item or disconnecting an identity in Mcoogle does not delete its Google, Microsoft, or third-party account. Clearing browser site data removes the local encrypted vault on that origin; back up first. Cloud records remain until removed through the controls below. Deletion removes active app records, not provider accounts, and does not promise immediate removal from infrastructure logs or provider-managed backups.

Troubleshooting

• Sign-in required: use Sign in to open your own workspace.
• Provider setup required: Google and Microsoft social login need provider credentials enabled in Supabase.
• Save failed: keep the window open, export the report if offered, and retry when online.
• Vault will not unlock: use the original master password and the correct domain/browser profile.

No public support address has been designated yet. Do not send passwords, API keys, or unredacted account exports in support messages.

Independent product

Mcoogle is an independent app. It is not Microsoft, Google, or OpenAI, and does not claim their sponsorship or endorsement. Provider names identify compatible services and console destinations.