Private utility · Owner-operated
Privacy Policy
Prepared November 6, 2026
Shift Rescue Backups is a private backup utility used by the Shift Rescue application owner. This policy describes the utility’s Google Drive integration and this informational website. It is not a privacy policy for the separate Shift Rescue application.
Google Drive data accessed
The utility requests only https://www.googleapis.com/auth/drive.file. It accesses files it creates or that the owner explicitly authorizes through Google Picker, including the selected backup folder. It does not request permission to browse the owner’s entire Drive.
Accessed data includes the authorized folder’s identifier, name, type, ownership, permissions, and upload capability; and backup files’ identifiers, names, folder location, size, checksums, backup-specific metadata, and encrypted contents. The utility checks that the designated folder is private and owner-only before using it. Authorized isolation tests may check the identifier of a specific unrelated file without reading its contents.
How data is used
Google Drive data is used to verify the backup destination, upload encrypted archives, read them back to verify integrity, list the utility’s backup files in that folder, and download selected backups for verification or recovery. It is not used for advertising, profiling, or training AI models.
Database backup archives can contain application records when a database export is separately authorized. Live integration testing has used synthetic data. This website does not initiate database exports, request Google consent, or provide a download interface for backups.
Storage and authorization credentials
Archives are encrypted locally using AES-256-GCM before upload to Google Drive. Encryption keys are not uploaded with the archives. The current implementation stores refresh credentials in the owner’s encrypted macOS Keychain; access tokens are used in memory. Credentials are not published on this website or committed to the source repository.
A durable backup-key custody and recovery arrangement and an unattended backup runner have not yet been activated. This policy makes no promise of a fixed backup retention period. Scheduled backups and automatic retention deletion are not enabled. Removing authorization does not itself delete archives already stored in Google Drive.
Sharing and service providers
The utility does not sell Google user data or share backup files with other users. Google processes the authorized Drive requests and stores the encrypted archives as the storage provider. Authorized backup operations and recovery are controlled by the application owner.
Cloudflare hosts these public information pages and may process connection and request information, such as IP addresses and browser details, to deliver and secure the website. These pages contain no analytics scripts, advertising, forms, sign-in, or application cookies. The pages do not receive backup archives or OAuth credentials.
Revoke authorization or request removal
The owner can revoke access in Google Account → Third-party connections by selecting Shift Rescue Backups and removing access. Revocation prevents future authorized access once Google applies it; it can invalidate this project’s related tokens. Reauthorization is required to resume use.
The owner can remove stored archives through Google Drive. For questions about data access, removal, or local credential deletion, contact the owner below. No automatic archive deletion or fixed deletion deadline is promised.
Contact and policy changes
The application owner can be contacted at drrios7@gmail.com. Please do not email passwords, tokens, backup archives, or private Medic records.
This policy will be updated if the utility’s data practices change. The date above identifies this version.