Privacy policy

For the personal rclone OAuth application described on the home page. In effect from 7 September 2026.

Who runs this

Batu Özdemir, a private individual, reachable at batuor@bx.org.tr. This is not a company and not a commercial service.

Who the users are

The operator, and nobody else. The application is a private rclone configuration used to reach the operator's own Google account. It is not distributed and accepts no other accounts.

What Google user data is accessed

When authorised, the application uses Google Drive API scopes to read, upload, modify and delete files in the operator's own Google Drive, and to read the account's basic profile and email address so that rclone can label the connection. Access is exercised only by rclone commands the operator runs.

How that data is used

Solely to transfer and synchronise the operator's files between Google Drive and storage the operator controls. The data is not analysed, profiled, indexed for search, used to train models, or used for advertising.

Where it is stored

• File contents pass through the operator's own machines during a transfer and are written only to destinations the operator chose in the rclone configuration.
• OAuth access and refresh tokens are stored in the local rclone configuration file on those machines, readable only by the operating system account that runs rclone.
• Nothing is stored on this web server. This site is static HTML: it has no database, no analytics, no cookies, no tracking pixels and no third-party scripts, and it never receives Google user data.

Sharing

No Google user data is sold, transferred or disclosed to any other person, company or service. The only party the application transmits data to is Google itself, over the Google Drive API.

Limited use

The application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and revocation

Tokens are kept only while the connection is in use and are deleted when the corresponding rclone remote is removed. Access can be withdrawn at any time from the Google Account permissions page, which invalidates the tokens immediately.

Changes

If this policy changes, the revised version replaces this page and the date above is updated.