NeoGDSync — Privacy Policy

Last updated: May 2026

What NeoGDSync does

NeoGDSync is an Obsidian plugin that syncs your vault files with your own Google Drive account. All data stays between your device and your personal Google Drive — nothing is sent to any third-party server.

Data we access

• Your Google Drive files, limited to the vault folder you configure.
• We request the https://www.googleapis.com/auth/drive scope to read, write, and delete files in your Drive.

Data we do NOT collect

• We do not collect, store, or transmit your files or metadata to any server we operate.
• We do not store your Google account information.
• We do not use analytics or tracking of any kind.

OAuth proxy

NeoGDSync uses a lightweight Cloudflare Worker (neogdsync-worker.neogdsync.workers.dev) as an OAuth proxy. Its sole function is to exchange your OAuth refresh token for a short-lived access token using Google's token endpoint. The Worker does not log, store, or forward your tokens or any other data. The Worker source code is publicly available in the plugin repository.

Your refresh token

Your Google Drive refresh token is stored locally in Obsidian's plugin data on your own device. It is never uploaded anywhere except to Google's token endpoint (via the proxy above) to obtain a fresh access token.

Third-party services

NeoGDSync communicates only with:

• Google Drive API — to sync your files.
• Google OAuth — to authenticate your account.
• NeoGDSync OAuth proxy (Cloudflare Worker) — to refresh access tokens without exposing the OAuth client secret in the plugin code.

Contact

If you have questions about this privacy policy, please open an issue on GitHub.