Privacy Policy

Who operates this integration

The account owner operates Hermes OS Backup for personal use. It is not a public backup service and does not offer visitor accounts.

Information processed

The owner selects application and service data for backup. Ubuntu operating-system files are excluded and are intended to be reinstalled separately during recovery. Restic encrypts selected backup contents locally using the owner's repository password before transfer. The current repository contains only a synthetic test snapshot.

rclone uses the owner's Google authorization to create, list, upload, download, and maintain repository files. The configured Google Drive OAuth scope is drive.file. Each OAuth grant is tied to the Google account that consents; this site's production status does not grant other people access to the owner's Drive. Google may process account identifiers, file metadata, storage usage, and connection information to provide Drive.

This website does not receive backup files or serve as a backup endpoint. Cloudflare may process ordinary connection data to deliver these static pages; see Cloudflare's privacy information for its service practices.

Where information is stored

Selected source data is processed on the owner's server. Restic encrypts repository contents before rclone transfers them to the owner's Google Drive. The rclone OAuth configuration is stored in a private server file. The Restic recovery password is stored separately from both the server and Drive.

Encryption protects repository contents, but does not hide all service metadata or prevent someone with account access from deleting stored files. Google Drive is subject to Google's terms and privacy practices.

Use and sharing

Google Drive access is intended only for the owner's encrypted backup and recovery operations. Drive data is not used for advertising, profiling, or unrelated purposes. Backup data is not intentionally shared with other people.

Retention and deletion

Backup sources and snapshot-retention settings are still being established. The owner can revoke Google access in Google Account security settings and manage repository snapshots and files. Deleting data from one system may not immediately remove copies retained in another system or Google's trash/version history.

Security and access

Access is intended to be limited to the owner's server and Google accounts. OAuth tokens and the Restic password are credentials and must not be published or shared. Losing the Restic password can make encrypted backups unrecoverable. No system or backup is claimed to be invulnerable.

Changes and contact

This policy will be reviewed against the selected backup configuration as services are added. For privacy questions, use the support contact shown on the Google OAuth consent screen.