Privacy policy

Crypt Drive Sync, an Obsidian plugin · Last updated: 12 October 2026

Summary

Crypt Drive Sync runs entirely on your devices. The developer operates no server and collects no data. Your notes are encrypted on your device before they are sent to your own Google Drive.

What data the plugin handles, and where

• Your notes and attachments are encrypted on your device with a key derived from your password. Only the encrypted files are uploaded to your Google Drive. Google cannot read file names or contents.
• Your encryption password is stored only on the device, in Obsidian's secret storage. It is never transmitted.
• Your Google sign-in token is stored only on the device, in Obsidian's secret storage. It is sent only to Google, to access Google Drive.
• Sync state (which files were last synced: paths, sizes, times) is stored only on the device, inside the vault's plugin folder.

Google user data

Each user connects the plugin to Google through an OAuth client they create in their own Google Cloud project. This policy describes how the plugin uses that access, whoever owns the client.

The plugin requests the https://www.googleapis.com/auth/drive.file scope. It can access only the files it created itself; the rest of your Google Drive is not visible to it. It uses this access solely to store, list, read and move its own encrypted files, for the sync you asked for.

Google user data is not transferred to the developer or to any third party, not used for advertising, not sold, and not used to train any model. The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Network connections

The plugin connects only to oauth2.googleapis.com (sign-in) and www.googleapis.com (Google Drive API). There is no analytics, telemetry, advertising, or crash reporting.

Removing access and data

• Sign out in the plugin settings, and revoke access at myaccount.google.com/permissions.
• Delete the plugin's folder in your Google Drive to remove the encrypted copy.
• In the plugin settings choose Advanced → “Reset setup on this device”: this removes the password, the Google sign-in and the client secret from the device. Then uninstall the plugin to remove its settings and sync state.

Contact

Questions: GitHub issues.

Кратко по-русски

Плагин работает только на ваших устройствах; у разработчика нет сервера, и он не получает никаких данных. Заметки шифруются на устройстве и хранятся в вашем Google Drive. Пароль и вход в Google хранятся только на устройстве. Плагин видит в Drive лишь созданные им файлы и обращается только к серверам Google. Аналитики и рекламы нет. Отозвать доступ: myaccount.google.com/permissions.