Vaultwarden Backups
Privacy Policy
This policy describes the owner-operated Vaultwarden Backups integration and its use of Google Drive for the owner’s personal vault backups.
Data Access & Use
The integration requests only https://www.googleapis.com/auth/drive.file. This permits access to files created by the application or explicitly granted to it. The backup workflow uses an application-created backup folder. It uploads encrypted archives, reads their metadata, downloads encrypted content for verification or restoration, and rotates its backup archives according to the configured retention schedule.
It does not request unrelated Drive files, contacts, email, or calendar data.
Encryption & Storage
Complete vault backup archives are encrypted before upload. Google Drive stores the encrypted archives and associated file metadata, such as names, sizes, and timestamps. Encryption does not conceal all metadata or eliminate every security risk.
OAuth credentials are stored in protected storage on the owner’s server and are not published on this site. The private backup decryption key is kept separately from the server’s upload credentials. During recovery, the owner decrypts the selected archive in a protected recovery environment.
Sharing & Limited Use
Google Drive processes the uploaded archives and related service information under Google’s Privacy Policy. The integration does not sell Google user data, use it for advertising or AI model training, or share it with unrelated applications.
The integration handles information received through Google APIs in accordance with the Google API Services User Data Policy, including its Limited Use requirements.
Retention & Deletion
The owner controls backup retention and can delete the application’s archives from Google Drive. Provider trash and retention behavior may affect when deleted files are permanently removed. Revoking the application’s Google account access stops future authorized access; it does not itself delete existing archives or separately stored offline copies.
This Information Site
These static pages contain no cookies, analytics, forms, or scripts. The hosting provider may process routine connection information when serving the pages.
Contact & Updates
For support or a privacy request, use the support email displayed on the Google consent screen for this application. This policy will be updated if the integration’s data handling changes.