Privacy

Last updated: 1 September 2026

Who we are

Drive Explorer is a tool for browsing and managing your own Google Drive. It is operated by the site owner (postmaster@chelsea.se). This page explains what data we handle and your choices.

You sign in with Google or with an email address and password. We store your account email and a unique auth identifier so we can keep your data separate from other users. We never see or store your Google password — authentication is handled by the identity provider.

Connecting your Drive

When you connect Google Drive, you grant OAuth scopes that let the app read and change files in your Drive. The connection is made through Lovable's App User Connector gateway. The per-user connection key that lets us call the Drive API on your behalf is encrypted (AES-256-GCM) and stored on the server only — it never reaches your browser.

What we read from your Drive

To render the folder tree, panes, and storage map, we read folder and file metadata: names, types, sizes, and modification dates. We cache folder sizes and file counts per account in a database so the views stay fast and consistent. That cache is scoped to your account and is never shared with other users.

What you can do to your Drive

You can move, copy, rename, create, and trash files and folders, and export or merge Google-native documents to PDF. These actions run through the Google Drive API on your behalf, exactly as if you had done them in Drive itself.

What we don't do

We don't sell your data or share it with advertisers. We don't read the contents of your files beyond what is needed to export them when you ask for a PDF. Folder statistics reflect your own Drive only, never another user's.

Where your data is stored

Account records and cached folder statistics live in the project's managed database, protected by row-level security so each user can only reach their own rows. Your Drive connection key is encrypted at rest. Authentication relies on the identity provider's secure storage.

Third parties

Your data is processed by Google (for authentication and Drive access) and the hosting and database provider that runs this app. We do not use advertising or behavioural tracking services.

Your choices

You can disconnect your Drive at any time from the workspace, which removes the connection key. You can delete your cached folder statistics, or delete your account altogether. For any access, correction, or deletion request, email postmaster@chelsea.se.

Contact

Questions about this policy or your data can be sent to postmaster@chelsea.se.

Changes to this policy

We may update this page as the app changes. The “Last updated” date below reflects the most recent revision.