Privacy policy
What Fieldplan is
Fieldplan is a personal planning application for organising projects, packing lists, tasks, ideas and timelines. It is designed to be local-first, with optional synchronisation through the user's own Google Drive account.
Google data Fieldplan accesses
When Google Drive sync is connected, Fieldplan requests basic Google account identity information for authentication and the drive.appdata permission. This permission allows Fieldplan to access only its own hidden application-data area in Google Drive. It does not grant Fieldplan access to ordinary Drive files, photos, documents or folders.
How Google user data is used
Google user data is used only to authenticate the authorised Fieldplan user and to synchronise Fieldplan's own project-operation data between that user's devices. Fieldplan does not sell Google user data, use it for advertising, or share it with unrelated third parties.
Where data is stored
- Fieldplan's working data is stored locally in the browser on each device.
- When Drive sync is enabled, Fieldplan's sync journal is stored in the application's private Google Drive
appDataFolder. - A long-lived Google refresh authorization is kept inside an encrypted, Secure, HttpOnly session cookie. Browser JavaScript cannot read that cookie. The Cloudflare Worker decrypts it only when needed to request a short-lived Google access token.
- Short-lived Google access tokens are held in browser memory and are not intentionally persisted by Fieldplan.
Service providers
Cloudflare hosts the Fieldplan web application and authentication Worker. Google provides authentication and the private Drive application-data storage used for sync. Their services are subject to their own privacy and security terms.
Retention and control
Local Fieldplan data remains on a device until it is cleared or removed. Synced Fieldplan data remains in the user's Google Drive application-data area until it is deleted through Fieldplan or otherwise removed by the user. Google access can be revoked from the user's Google Account permissions.
Security
Fieldplan limits Google Drive access to the narrow drive.appdata scope. Authentication cookies are encrypted and marked Secure and HttpOnly. Fieldplan is intended for a limited authorised user rather than as a public multi-user service.
Google API Limited Use
Fieldplan's use of information received from Google APIs is limited to providing its user-facing authentication and private Drive-sync features and is handled in accordance with the Google API Services User Data Policy, including the Limited Use requirements.
Terms of use
Use of Fieldplan is also subject to the Fieldplan Terms of Use.
Changes
This policy may be updated when Fieldplan's data handling or integrations change. The effective date above will be updated when material changes are made.
For privacy or support questions, use the support contact shown on Fieldplan's Google authorization screen.