itmk.xyz

Privacy policy of itmk.xyz

Last updated: 2026-09-27

1. Who is responsible

The controller of your personal data is [owner's full name], [postal address], email [contact email] ("we"). itmk.xyz (https://itmk.xyz) lets invited people sign in with their Google account and connect their Google Drive.

2. What data we process

  • From Google sign-in: your Google account ID, email address and name. We use them to recognise you and to check that your address is on the list of people allowed to use the site. We do not receive your Google password.
  • If you connect Google Drive: a token that lets itmk.xyz act in your Drive, stored encrypted, with the date you connected it. The access you grant is Google's drive.file permission: itmk.xyz can reach only the files it creates itself or that you open with it, never the rest of your Drive. When you connect, we ask Drive once for the account's email address to check the connection works; we do not store it. At present itmk.xyz does not create, read or change any files in your Drive.
  • Cookies: a session cookie while you are signed in, a short-lived cookie that protects the sign-in round trip to Google, and a cookie that remembers your language. All are strictly necessary. There are no analytics, advertising or tracking cookies.
  • Server logs: your IP address, the time, the address requested and your browser's identification, recorded by the web server.

3. Why, and on what legal basis

  • Your account, sessions and Drive connection: to provide the service you asked for (Art. 6(1)(b) GDPR).
  • Server logs: to keep the site secure and prevent abuse, our legitimate interest (Art. 6(1)(f) GDPR).

4. Google user data and the Limited Use requirements

itmk.xyz's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • we use Google user data only to provide and improve the features you see on this site;
  • we do not sell it, and do not use or transfer it for advertising;
  • we do not transfer it to anyone, except as needed to provide the service, to comply with the law, or as part of a merger or sale of the service with notice to you;
  • no person reads it, unless you ask us to, it is needed for security or to investigate abuse, or the law requires it.

5. Who receives the data

  • OVH SAS, which hosts the site;
  • Google, which provides sign-in and Google Drive under its own privacy policy.

We do not sell personal data and do not share it with anyone else.

6. How long we keep it

  • Your account: until you delete it, or until we delete it when your access ends.
  • Sessions: until you sign out, or 30 days at most.
  • The Drive token: until you disconnect Drive or delete your account; we then revoke it at Google.
  • Server logs: 30 days.

7. Your choices and rights

On your account page you can disconnect Google Drive or delete your account at any time. You can also remove itmk.xyz's access in your Google Account, at myaccount.google.com/connections.

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Write to [contact email]. You may also lodge a complaint with a supervisory authority; in Poland, the President of the Personal Data Protection Office (uodo.gov.pl).

8. Security

The site is served only over HTTPS. The Drive token is encrypted in our database, session tokens are stored only as hashes, and access is limited to invited accounts.

9. Changes

If this policy changes, we will publish the new version here with a new date. If a change affects how we use Google user data, we will ask for your consent again before it applies.