Legal & Privacy

Privacy Policy

Last updated: August 2026

Your privacy is paramount. This Privacy Policy outlines how Batuhan's Public Drive (“we”, “our”, or “the Service”) collects, uses, and safeguards your information when you access our web interface and associated CDrive services.

Google API Services User Data Policy Compliance
Strict adherence to Google's Limited Use requirements

Batuhan's Public Drive's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We never sell your Google user data, use it for advertising, or transfer it to third parties for generalized AI/ML model training.

1. Information We Collect

When you interact with the Service, we may collect the following:

  • Google Account Profile: When you sign in using Google OAuth, we receive your basic profile information provided by Google, including your name, email address, and profile image.
  • Authentication Tokens: Temporary OAuth access tokens and refresh tokens necessary to authenticate API requests to Google Drive on your behalf.
  • File Metadata & Content: Metadata (such as file names, MIME types, file sizes, folder structures, and modification dates) needed to display and navigate your drive. File contents are accessed only when streaming, previewing, or downloading files at your direct request.
  • Technical Log Data: Standard server request logs (such as request timestamps, browser user-agent, and HTTP status codes) used strictly for performance monitoring and error diagnostics.

2. Google OAuth Scopes & Usage

We request only the scopes required to provide core functionality:

openid, email, profile

Used solely to verify your identity, display your account details, and assign your user permission role (e.g. Owner, Editor).

.../auth/drive

Used to browse directories, list items, upload, and download files directly to and from your authorized Google Drive storage.

3. How We Use Your Information

We utilize the collected information strictly for:

  • Providing a responsive, minimal web interface for exploring and managing Google Drive files.
  • Directly streaming file downloads and folder archives to your browser.
  • Enforcing access control rules (distinguishing between anonymous guests and authorized accounts).
  • Ensuring application stability, uptime, and security.

We do not engage in behavioral tracking, marketing profiling, or unsolicited email communications.

4. Data Storage & Token Security

We prioritize data minimization and industry-standard security practices:

  • Encrypted Sessions: Session tokens and OAuth access tokens are encrypted and transmitted using secure HTTP-only cookies.
  • No Permanent Storage of File Contents: Files are streamed directly between Google Drive and your client browser; we do not store copies of your personal files on intermediary permanent databases.
  • Secure Transport: All connections are encrypted using modern Transport Layer Security (HTTPS/TLS).

5. Managing & Revoking Access

You maintain full control over your Google Account and connected permissions at all times:

  • You may sign out of the Service at any point via the user menu in the navigation bar.
  • You can immediately revoke this application's access to your Google account by visiting Google Account Third-party apps & services.

6. Children's Privacy

The Service is not intended for or directed toward individuals under the age of 13. We do not knowingly collect personal data from children.

7. Changes to This Privacy Policy

We may periodically update this policy to reflect changes in our practices, technologies, or legal obligations. When updates occur, the “Last updated” date at the top of this page will be revised accordingly.

8. Contact & Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out via our open-source repository: