Privacy policy

Google data the client accesses

The client requests only the Google Drive drive.file permission. This permission lets it access backup files and folders that it creates. It does not request access to other Drive files, Google contacts, email, or profile data.

Rclone stores the OAuth access token and refresh token in a restricted configuration file on operator-controlled infrastructure. The tokens remain there until the operator revokes authorization or deletes that dedicated configuration.

How the client uses access

The client uses Google Drive access only to create, list, verify, download, and delete its encrypted backup archives.

Vaultwarden data is encrypted before it reaches Google Drive. Google Drive does not receive the encryption passphrase.

Sharing and sale

Sweet Pete Labs does not sell, rent, or share Google user data. It does not use that data for advertising, analytics, or profiling.

Retention and deletion

The client retains encrypted daily, weekly, and monthly archives according to its configured backup schedule. It automatically deletes older archives.

The operator can revoke access through the Google Account permissions page. Revoking access stops future Drive operations but does not delete files that the client already created in Drive.

To remove all related data, the operator deletes the encrypted archives from Google Drive, revokes the client's Google Account access, and deletes the dedicated rclone configuration from operator-controlled infrastructure.

This website

This website uses no analytics, advertising, cookies, tracking pixels, or forms. Its hosting infrastructure may process standard connection data required to deliver and protect the site. Sweet Pete Labs does not use that data for visitor analytics or profiling.

Google API policy

The client's use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Contact

For privacy questions, email antoncichp [at] gmail.com.