1. Purpose and operator
Family Vault Backup is a personal, owner-operated backup configuration for a self-hosted family password manager. It is not offered as a public service. The operator uses locally managed software to prepare encrypted recovery copies and place them in an authorized Google Drive account.
2. Google user data accessed
The utility requests Google's https://www.googleapis.com/auth/drive.file permission when the owner authorizes the Google Drive connection. This scope is intended to permit creation, listing, retrieval, modification, and deletion of files that the application creates or is granted access to in Google Drive.
The utility does not need access to Gmail, Google Photos, Google contacts, or unrelated Drive documents for its backup purpose. No Google account data is collected through these static web pages.
3. How data is used
The authorized Drive connection is used solely to create, synchronize, verify, restore, and, when directed by the operator, remove encrypted backup files. Rclone provides the connection to Google Drive; Restic creates the encrypted backup data before transfer. The operator uses backup data for personal disaster recovery, not for profiling, advertising, or unrelated analysis.
4. Storage and security
Password-vault backup contents are encrypted locally with Restic before being transmitted to Google Drive. Encryption credentials are managed separately from the Drive backup files. Google OAuth tokens and other configuration secrets are stored on the operator's private backup system and are not embedded in these public pages.
The Google Drive account stores encrypted backup objects and associated repository metadata. Google and the infrastructure provider may process service metadata according to their own policies.
5. Sharing and third parties
The application does not sell Google user data or share it with advertisers or data brokers. The authorized Google Drive service stores encrypted backup objects. Cloudflare hosts this public information website and may process standard web-request information required to deliver it. No third-party analytics scripts or advertising pixels are included in these pages.
6. Retention, deletion, and revocation
Encrypted backup files are retained until the operator removes them according to the backup retention and recovery policy. Disconnecting or revoking Google Drive authorization stops future access but does not automatically delete existing backup files; the operator can delete those files in Google Drive. The Google Account owner can review and revoke access through Google Account connections.
7. Website visitors
This website is informational. It does not offer accounts, collect passwords, set tracking cookies, or run analytics scripts. Standard network request data may be processed by Cloudflare to serve and protect these pages.
8. Contact and updates
Questions or requests regarding this private utility may be directed to the application operator through the user-support email displayed on the Google OAuth consent screen. This policy will be updated if the way Google user data is accessed, used, stored, or shared changes.