Privacy VaultPrivacy policy
Privacy Vault is operated by one person for their own data-deletion requests. This page explains what it does with the Google account data it is allowed to access.
Who uses it
The application is used only by its owner, with the owner's own Gmail account. It offers no accounts, sign-up or service to anyone else.
Google permissions requested
gmail.send— to send deletion requests to data brokers, and to send the owner a notice when a broker replies.gmail.readonly— to read replies from data brokers.
It does not request permission to modify, label, move or delete mail, and it does not access contacts, calendar, Drive or any other Google service.
What it reads
Each request is sent from a dedicated address for that broker (for example
name+broker@gmail.com). The application searches only for mail addressed to those
addresses, and checks every message it fetches before keeping it. Mail to any other address in the
account is never read or stored.
What it stores, and where
- On the owner's own computer: copies of the broker replies, the requests that were sent, and the status of each request. This is the record of when each request was made and how it was answered.
- On a server the owner controls: the list of per-broker reply addresses, the broker names, and the identifiers of messages already announced, so the same reply is not reported twice. No message content and no personal profile is stored there.
- The Google authorization token is stored on those two machines only, and can be revoked at any time from the Google account's security settings.
What it never does
- It does not sell, rent or share Gmail data with anyone.
- It does not use Gmail data for advertising, profiling or any purpose other than tracking the owner's own deletion requests.
- It does not use Gmail data to train artificial intelligence or machine-learning models.
- No person other than the owner reads the data.
Privacy Vault's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
This website
This site sets no cookies, runs no scripts and loads nothing from other domains. It is hosted on Cloudflare Pages, which keeps standard request logs.
Deleting the data
Revoking the application's access in the Google account stops all further reading and sending. The copies kept on the owner's computer and server are deleted by the owner when they are no longer needed as a record of the requests.
Changes and contact
Changes to this policy are published on this page with a new effective date. Questions: ontimenicaragua@gmail.com.