Privacy policy

Last updated: 14 October 2026

Obscuro Private Bridge is a private, self-hosted set of tools with a single user: its operator. This policy describes how Obscuro Private Bridge handles data from the operator's Google account. No data from any other person's Google account is accessed, because no one else signs in to it.

Data accessed

Each tool requests only the access it needs. Depending on the tool, that is:

• Basic profile information (email address), used only to identify which account is connected.
• Google Calendar data: the calendars the operator has access to and their events (titles, times, locations, descriptions, attendees, reminders and recurrence).
• Google Contacts data: the operator's contacts and their details (names, phone numbers, email and postal addresses, birthdays, notes and groups).
• YouTube data, read-only: the operator's own subscriptions and playlists.
• Gmail and Google Drive data, only if the operator connects a tool for that: messages and files the operator chooses to archive or back up.

How the data is used

• To keep the operator's calendars and contacts in sync between Google and the operator's self-hosted calendar and contacts server. Changes made on either side, including deletions, are applied to the other side.
• To keep a copy of the operator's own data in the operator's self-hosted tools and backups.

Data is not used for advertising, profiling, sale, or training machine-learning models, and it is not shared with anyone except as described below.

Processing and storage

• Obscuro Private Bridge runs on servers controlled by the operator. OAuth tokens are stored encrypted in the operator's password store and, for tools that run unattended, as access-restricted secrets on those servers.
• Synced data is stored in the operator's self-hosted services on those servers.
• Those services are backed up with encryption to object storage in the European Union (Hetzner). The backups can only be read with keys held by the operator.

Google API Services User Data Policy

Obscuro Private Bridge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access and deleting data

Access can be revoked at any time on the Google Account permissions page. The operator can delete the stored tokens, the synced data and its backups at any time.