← Pixel Critters Village Staging Backup

Privacy Policy

Effective and last updated: 5 November 2026

This policy describes the private backup utility named Pixel Critters Village Staging Backup (“the utility”), used by the project owner to back up the project's Supabase staging database. The public pages on this site only explain the utility; they do not provide a database upload or account service.

Google Drive access

The utility requests Google's drive.file OAuth permission. It uses that permission to create, list, verify, download when needed for recovery checks, and manage the backup files it creates or uses in its dedicated Google Drive backup folder. This permission does not give the utility access to unrelated files in the owner's Drive. The utility does not request Google profile or Gmail access.

Google processes the authorization and stores the encrypted backup files in the owner's Drive under Google's own terms and privacy policy. The utility does not sell Google user data, use it for advertising or profiling, or use it to train generalized or custom AI models. It does not disclose Google Drive data to other people or services, except Google as the storage provider and where the owner directs the backup or recovery process.

What the backups contain and how they are protected

A staging database export may contain project data, account identifiers, and authentication password hashes. Before an export is uploaded, the utility encrypts it locally on the owner's Mac with age. Only the encrypted export and its checksum are uploaded. The recovery key is kept separately by the owner and is not uploaded alongside the backup. The checksum is used to check file integrity; it is not encryption.

The OAuth client configuration and token are kept in a private local configuration file on the owner's Mac. They are not sent to this information website. The owner controls the local backups, the encryption key, the Google Drive folder, and the Google account authorization.

Website logs and analytics

These pages contain no analytics, advertising pixels, or embedded third-party content. The hosting provider may process routine connection and security logs as part of serving the site. The information website does not receive database exports, encryption keys, OAuth tokens, or backup contents.

Retention and deletion

Backup files remain in the owner's local backup folder and Drive folder until the owner deletes them. There is no automatic Drive retention or deletion policy in the utility. The owner can revoke Google authorization in the Google Account security settings and remove the local OAuth configuration. Deleting the only copy of the recovery key may make encrypted backups permanently unrecoverable, so the owner should verify another recovery-key copy before deleting one.

Children and public access

The utility is a private administrative backup tool and is not designed for children or public account registration. The OAuth app is currently in Google's Testing status and is limited to its configured test users.

Changes and contact

This policy will be updated if the utility's data access or handling changes. For privacy questions or requests about this utility, contact the owner at [email protected].

Return to the utility information page