Privacy Policy

Effective November 6, 2026

ITxxtra Server Backups ("the application") is a private-use backup workflow operated for a limited number of authorized household servers. It uses Rclone and Google Drive to store and retrieve backup archives. This page describes the intended configuration and handling of data. The website itself is informational and does not offer public registration or file uploads.

1. Information handled

With the Google account holder's authorization, the application may access Google Drive file information and file contents as permitted by the OAuth scope granted. Depending on the selected scope, the authorization may allow broader Drive file access than the application's backup folder. The intended use is to create, list, verify, retrieve and delete backup files in designated backup locations.

Backup archives may contain server settings, application data, account identifiers, tokens and other sensitive configuration details. Such archives are intended to be encrypted on the source server before upload. Do not assume an archive is protected unless that server's encryption configuration has been successfully tested.

2. Why information is used

Google Drive access is used solely to perform backup storage and recovery operations authorized by the account owner, including backup integrity checks and retention management. The application is not intended to analyze unrelated Drive content, serve advertising or build user profiles.

3. Storage, access and security

Backups are intended to be encrypted locally using Rclone's crypt functionality before reaching Google Drive. The source server holds its configuration and encryption credentials, and Google Drive stores the resulting files. Access to the Google account, backup folders, and recovery credentials should be limited to authorized administrators. No security measure can guarantee complete protection.

4. Sharing and third parties

The backup workflow uses Google Drive as its storage provider and Google OAuth for authorized access. The backup operator does not sell Google user data or use it for advertising. Data may be accessible to Google according to Google's service terms and policies, and to the account owner and administrators with authorized access. Backup content is not intentionally shared with unrelated third parties.

5. Retention and deletion

Backup files are retained according to the configured per-server retention policy and available storage. Local and cloud retention may differ. The authorized account holder can request removal of backups from the designated storage location. Deleting cloud backups does not automatically delete source data or other copies that may have been created.

6. Authorization and revocation

Access to Google Drive is granted through Google's OAuth authorization process. The Google account owner may revoke the application's access using their Google Account security settings. Revocation stops future authorized Drive operations until access is granted again; it does not itself delete previously stored backup files.

7. Website usage

This informational site does not provide login, tracking forms or advertising. Its hosting provider may process standard web requests and operational logs under its own policies. The site does not itself accept backup files.

8. Changes

We may update this policy as the backup workflow evolves. Changes will be published here with an updated effective date.

9. Contact

For privacy questions, access requests or deletion requests, contact charleshauff@gmail.com.