Sign-in privacy

This service exchanges your Google authorization code and renews access tokens for Calendar. It receives your email address, granted permissions, and Google tokens during that process. Calendar events sync directly between your tablet and Google; this service does not request your calendar events.

Pairing records last ten minutes. They contain a hashed tablet polling secret, a temporary OAuth verifier, your email after sign-in, and an encrypted credential grant. Successful delivery deletes the pairing record; expired records are cleaned up regularly. Your tablet retains the encrypted grant for future token renewal.

The service keeps its OAuth client secret and encryption key in server-side secrets. It does not intentionally log authorization codes or tokens. The hosting provider may process connection metadata and retain infrastructure records or database backups according to its policies.

You can revoke access in your Google Account's third-party connections. Removing the app from your tablet alone does not revoke Google's authorization.