WNCMS / BACKUP

Data handling

Privacy policy

Effective 7 September 2026 · Application: 107 Server Backup

This policy covers the private backup utility operated by the WNCMS site operator, reachable at 3dayseo@gmail.com, and these application information pages.

Information used

The utility processes operator-selected server files and database exports. These may include website user data, application configuration and credentials needed for recovery. Archives are encrypted on the source server before upload.

Google OAuth access and refresh tokens are used to connect the operator's Drive account. The utility processes metadata for application-accessible files, such as names, identifiers, sizes, timestamps and checksums, and may query account identity or storage quota to validate the destination.

Purpose and permissions

Google data is used only to store and manage backups, verify transfers, enforce configured retention and support operator-requested recovery. The requested drive.file permission covers files created by the app or explicitly authorized for it. The utility does not request Gmail, contacts, or unrestricted Drive access.

Storage and access

OAuth credentials are stored in a restricted configuration on the operator's server. Encrypted backup files are stored in the operator's Google Drive; local working files and operational logs may be retained for backup processing and troubleshooting. Authorized administrators can access these systems. Recovery keys are handled separately from uploaded backup packages.

Operational logs may contain task times, file identifiers, byte counts and errors. These information pages contain no analytics scripts, advertising trackers, forms or application cookies. Hosting infrastructure may record standard access logs, including IP addresses, requested URLs and timestamps, for operation and security.

Sharing and service providers

Backup transfers run directly between the operator's server and Google Drive. Google processes authorization and storage requests under its own policies. The utility does not intentionally send backup contents or OAuth tokens to the rclone project or aaPanel. Hosting providers process data as necessary to operate their infrastructure.

Google user data is not sold, used for advertising, or used to train generalized AI or machine-learning models. It is not shared with unrelated parties, except as required by law. Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and deletion

The intended routine retention is the three most recent successful daily backups and two monthly backups. This policy is applied only after the relevant backup jobs are configured; trial archives, recovery material and incident-preservation copies are managed separately. Existing unrelated Drive files are not part of this retention policy. Google Drive trash and provider retention can affect when deleted files are permanently removed.

The operator can stop the utility, revoke its access through Google Account connections, and remove local credentials and stored backups. Revoking access prevents future authorized operations but does not itself delete existing backups. Contact the operator with data-handling requests; do not send passwords, tokens or backup files by email.

Security and changes

Encryption and restricted permissions reduce risk but cannot guarantee protection against a compromised server or account. This policy may be updated when the utility's data practices change; the effective date will be updated on this page.