OTAK.DEV

Privacy Policy

Effective 7 October 2026

otak.dev is a private website. It is not a public service: only approved Google accounts can sign in. This page explains what data otak.dev handles, including data from Google, and what it does with it.

Google sign-in

To sign in, otak.dev uses Google Sign-In and asks Google only for your email address (the openid and email scopes). The email is checked against the list of allowed accounts and kept in a signed cookie on your device for up to 7 days. The server also logs the email and IP address of each sign-in for security. Accounts that are not on the list are refused, and nothing else about them is stored beyond that refusal in the security log.

Google Drive

The owners can connect a Google Drive account so otak.dev can back up its own files there. For this, otak.dev asks for the drive.file scope, which only gives access to files and folders that otak.dev itself creates. otak.dev cannot see, read, change or delete any other file in that Drive.

• What is uploaded: otak.dev's own files, into a folder named "otak.dev backup".
• What is stored on the server: a refresh token for that Drive account, so the nightly backup can run. It is kept on otak.dev's server only and never shown in the browser.
• Disconnecting: the "Disconnect" button on otak.dev revokes the token at Google and deletes it from the server. Access can also be removed at any time at myaccount.google.com/permissions.

How Google data is used

otak.dev's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google data is used only to sign the owners in and to store otak.dev's own backups.
• It is not sold, not shared with anyone, not used for advertising, and not used to train any AI or machine-learning model.
• No person reads it, except the owners themselves looking at their own files.

No AI-generated intimate imagery

otak.dev has no image-generation or image-editing features. It does not use Google APIs, or any other service, to create, generate, alter or distribute AI-generated non-consensual intimate imagery (NCII) or any sexually explicit content.

Other data

The site stores what its owners put into it on otak.dev's server. otak.dev uses no analytics, no advertising and no third-party tracking. Requests pass through Cloudflare, which processes IP addresses to deliver and protect the site.

Keeping and deleting data

Data is kept until the owners delete it. Backups in Google Drive keep earlier versions of changed files for 30 days. To have data removed, or for any question about this policy, contact the site's owners through the support contact shown on Google's sign-in screen.

Changes

If this policy changes, the new version will be posted on this page with a new effective date.