Privacy Policy

calWidget is a personal, single-user application. It is run by one individual on their own hardware, for their own use. It is not a product, it is not offered to other people, and it has no users other than its owner.

What it accesses

With the owner's explicit consent, calWidget requests one Google scope:

• https://www.googleapis.com/auth/calendar.readonly — read-only access to the owner's own Google Calendar.

It uses this solely to read upcoming events from calendars the owner already owns or subscribes to, and render them on a dashboard running on the owner's home network. Access is read-only: calWidget cannot create, modify or delete any calendar data.

What it stores

An OAuth refresh token is stored in a configuration file on the owner's own server so the dashboard can re-authenticate without repeated sign-in. Calendar event data is held only transiently in memory for up to a few minutes while a dashboard page is rendered, and is never written to disk.

What it does not do

• No calendar data is sold, shared, or disclosed to any third party.
• No data is transmitted anywhere except between the owner's own server and Google's APIs over HTTPS.
• There is no analytics, advertising, tracking, or profiling of any kind.
• No data belonging to any other person is collected, because there are no other users.

Retention and deletion

Because nothing is stored beyond the credential described above, there is nothing to retain. The owner can revoke calWidget's access at any time from Google Account permissions, which immediately and permanently ends all access.

Google API Services User Data Policy

calWidget's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Questions about this policy: [email protected]