Privacy Policy

Effective date: 2026-09-07. This policy covers the website cloudister.net and the application “rclone” operated through it.

1. Operator and contact

This website (cloudister.net) and the application “rclone” described on the homepage are operated by the registered owner of the domain cloudister.net: Fabrice Charretour, contactable at fabrice@charretour.com. The operator is a private individual; the application is used solely for personal, non-commercial purposes.

2. What the application is

“rclone” is a personal backup client. It runs on the operator's own computers and synchronizes files between those computers and the operator's own Google Drive account. Full details of its purpose are on the homepage.

3. What data the application accesses from Google

When the operator connects their Google account, the application requests exactly one OAuth scope:

https://www.googleapis.com/auth/drive

This allows the application to:

• list files and folders in the authorized Google Drive account;
• download files from that account to the operator's local disks;
• upload or update files in that account when restoring or backing up.

The application does not request or receive access to Gmail, Google Photos, Contacts, Calendar, or any other Google service. It never accesses Google Drive data belonging to any other user.

4. What data is collected, stored and shared

• Collected by this website: nothing. The website sets no cookies, runs no analytics, shows no advertising, and has no user accounts or login.
• Stored by the application: only the OAuth access and refresh tokens needed to connect to Google Drive, stored locally in the operator's own encrypted configuration file on their own machines. No file contents, file names, or other Google user data are stored on any server operated by the operator.
• Shared with third parties: nothing. Google Drive user data is never sold, rented, transferred, or disclosed to any third party. It is not used for advertising, and it is not used to train machine-learning or AI models.

5. Purpose and lawful basis of processing

The only purpose of processing Google Drive data is to create and maintain backup copies of the operator's own files. The lawful basis is the operator's own consent, given at the moment of OAuth authorization, and legitimate use: the operator processes their own personal data for archival and backup purposes. No data belonging to any other person is processed.

6. Retention

OAuth tokens remain valid until the operator revokes them or deletes the local configuration file. Backup copies of files live exclusively on the operator's own local storage, under their sole control, and are kept or deleted at their discretion.

7. How to revoke access and delete data

Access can be revoked at any time by visiting Google Account → Security → Third-party access and removing “rclone” from the list. Revocation immediately ends all access. Local tokens are deleted by removing the application's local configuration file. Because the operator is the only user, this removes all personal data associated with the application.

8. Security

OAuth tokens are stored only on the operator's machines in a file readable solely by the operator. All transfers with Google use HTTPS/TLS. The operator's machines are protected by full-disk encryption and standard system access controls.

9. Google API Services User Data Policy — Limited Use

The application's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. Children's privacy

The application is not directed at children and is used only by the adult operator. No data of children is collected.

11. Changes to this policy

Material changes to this policy will be reflected on this page with a new effective date. Because the application has a single user (the operator), no other notification channel is required.