Symplay Backups privacy policy

Updated 2026-11-09.

This policy covers the private Symplay Backups tool, operated by Symplay's owner. It is separate from the player-facing Symplay application. Backup setup is in progress; automated backups will only be enabled after encryption and recovery checks.

Google data accessed and purposes

The tool requests the Google Drive drive.file permission. It uses this to create and manage its own backup files and folders, inspect their metadata, download them for verification or recovery, and delete old copies according to the operator's retention settings. It is not designed to read unrelated Google Drive documents, Gmail, contacts or calendars.

Backup contents and protection

Backups may contain mail messages and attachments, mailbox and account records, mail-server databases, configuration, certificates and operational secrets. Before any backup upload is enabled, rclone crypt will be configured to encrypt backup contents and names on the VPS. Google Drive will store encrypted files; file sizes, timestamps and account activity may still be visible to Google.

OAuth credentials and the configuration needed for unattended encryption and recovery are stored on the VPS with restricted filesystem permissions. Separate recovery credentials must be retained by the operator outside the VPS. This does not make backups immune to deletion by someone who compromises the server.

Access, sharing and location

Only the operator and explicitly authorized administrators may use the backup credentials or decrypt backups for maintenance and recovery. Google processes the encrypted backups and associated service metadata under its applicable terms. The VPS provider hosts local mail data and backup staging files. Google Drive storage is not restricted by this setup to Canada.

Google user data is not sold, used for advertising, or used to train general-purpose AI models. Symplay Backups' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

The operator controls retention and removes older backup sets through the configured rotation process. No automated retention schedule has been enabled yet. Deleting a current email does not immediately remove it from historical backups. Copies remain until those backup sets expire or are deleted. Drive trash, versions and provider retention may delay final erasure.

Revoking access

The operator can revoke the tool's access through Google Account third-party connections. Revocation stops future authorized Drive operations but does not delete existing backup files. The operator can separately delete the backup folder in Drive, empty its trash where appropriate, and remove local staging copies and credentials.

This website

These static informational pages contain no analytics, advertising, Google sign-in or application cookies. Standard web-server logs can record visitor IP addresses, request paths, timestamps and browser information for operation and security.

Contact

Questions and data requests: support@symplay.ca.