Privacy policy

Google data accessed and why

With the owner's consent, the app uses Google Drive's drive.file permission to create and manage its backup files and folders, or files explicitly authorized for the app. It accesses file identifiers, names, sizes, timestamps and contents as needed to upload, list, verify, restore and expire backups. It may read account storage-quota information to avoid exhausting available storage.

The app does not request Gmail, calendar or contact access, and does not use unrelated Drive files. Google authorization credentials are used only to authenticate these backup operations.

Storage and protection

Backup contents are encrypted locally by restic before upload and stored in the owner's Google Drive. Temporary source archives may exist on the owner's protected local storage during preparation, upload or recovery. OAuth credentials and backup keys are kept in restricted runtime storage, not on this public website. Operational logs may contain backup identifiers, timestamps, sizes and failure details; they must not contain access tokens, passwords or backup contents.

Sharing and permitted use

Google user data is used solely to provide the owner's backup and recovery functions. It is not sold, used for advertising, provided to data brokers, or used to train AI or machine-learning models. Backup data is transmitted to Google Drive for storage and back to the owner's systems for checks or recovery. Any disclosure outside these operations requires the owner's authorization or a legal obligation.

Enderlab Backups' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Retention, deletion and revoking access

Backups remain until they expire under the owner's configured retention policy or the owner removes them. Temporary local archives are removed under the approved cleanup policy after successful upload and verification; failed uploads may retain a pending archive for retry. Revoking access does not automatically delete backups already stored in Google Drive.

The owner can revoke authorization through Google Account connections. Backup deletion should be performed through the backup tools so repository integrity is preserved. The owner can also remove the entire repository from Drive when intentionally retiring it; files left in Drive's trash remain subject to Google's trash-retention behavior.

This public information website

This static site is hosted by Cloudflare Pages. It has no forms, application cookies, advertising, tracking scripts or access to the backup repository. Cloudflare may process technical request information such as IP addresses, requested URLs and browser details to deliver and secure the website, under Cloudflare's privacy policy.

Contact and changes

For privacy questions or requests, contact the operator at simon.abitbol@gmail.com. This policy will be updated if the app's data use changes; the effective date above identifies the current version.