Privacy Policy
For the VPS Backups utility by StreemMix · Updated November 2, 2026
Purpose and scope
This policy describes an owner-operated backup utility for StreemMix server applications. The backup utility is not a public file storage or backup service. The informational pages on this site do not collect Google account credentials or accept backup uploads.
Data included in backups
Depending on the server applications being backed up, encrypted backups may contain application configurations, files and database records, including personal data held by those applications. The utility does not independently collect unrelated Google Drive documents, photos or other account files.
Google Drive access and use
With the owner's explicit authorization, the utility uses the Google Drive API with the https://www.googleapis.com/auth/drive.file permission. This permits it to create and manage its own backup files, as well as files explicitly made available to the app; it does not request unrestricted access to the Google Drive account. Access is used for encrypted backup storage, integrity checks and restoration.
Encryption and storage
Restic encrypts backup content before uploading it through Rclone to Google Drive. The encryption password is retained by the owner and protected on the server, not placed in the Google Drive backup folder. Google Drive can process file metadata necessary to provide the storage service. This site does not make a claim of formal security certification.
Retention and deletion
Encrypted backup copies are maintained according to the owner's configured backup and retention procedures. Stored backups can continue to exist after Google access is revoked and must be deleted separately by an authorized account owner. Automatic deletion may be disabled for protection against accidental loss.
OAuth credentials and revocation
OAuth credentials are stored in restricted server configuration files and used only to access the authorized backup storage. The owner can revoke Google access through Google Account connections. Revoking access prevents further authorized Drive API operations using that grant, but does not remove previously stored encrypted backups.
Website operation
These public informational pages do not have login forms or analytics scripts. The website hosting provider may process ordinary access logs, such as IP addresses, to operate and secure the service.
Contact
For questions about this policy, contact the StreemMix site operator through the main StreemMix website.