Privacy Policy
Effective October 12, 2026
This policy covers the personal-use Server IT Monitoring application and this informational website. The Gmail integration is being configured; email delivery begins only after the owner authorizes it and approves testing.
Information the application processes
Local monitoring processes server and application status, selected diagnostic evidence, timestamps, and report content. The Gmail integration processes an OAuth client identifier, OAuth credentials and tokens, the sending address, the designated recipient address, message contents, and delivery results. It does not request access to inbox contents or existing Gmail messages.
Gmail authorization and purpose
The application requests only https://www.googleapis.com/auth/gmail.send. This permission is used solely to send owner-approved server alerts and health/update reports. It does not permit the application to read, modify, or delete existing email. Sign-in takes place on Google's authorization pages; the application does not request or store a Gmail password.
Storage and protection
OAuth client credentials are encrypted locally with Windows DPAPI bound to the authorized Windows account. Refresh tokens, once obtained, will receive the same protection. Access tokens are used in process memory. Credentials and tokens are excluded from reports, source code, and application logs. Selected diagnostic reports and delivery records are retained locally within configured storage limits; reaching a limit does not authorize automatic deletion.
Sharing and service providers
When sending is enabled, message contents and the designated email addresses are transmitted to Google through the Gmail API and delivered to the owner's recipient mailbox. Recipients and their email providers can retain messages. Cloudflare hosts this static website and may process visitor IP addresses, request metadata, and security logs as part of providing hosting and security. No third-party analytics scripts, advertising, tracking pixels, or sign-in forms are included in this website's files.
Google user data is not sold, used for advertising, or used to train AI models. Routine monitoring and email delivery do not send data to ChatGPT, Codex, or OpenAI APIs. Any separately requested human-assisted troubleshooting is outside routine operation and must avoid exposing credentials.
Google API Limited Use
Server IT Monitoring's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used only for the disclosed email-sending functionality. Any exceptional disclosure must be authorized by the owner, necessary for security or legal obligations, or otherwise permitted by that policy.
Retention, control, and removal
OAuth tokens are retained locally while the integration is authorized. The owner can revoke access through Google Account connections and request removal of the local encrypted credentials. Local diagnostic records and recipient email copies require separate removal; revoking access does not delete previously delivered messages. No automatic credential, report, or backup cleanup is implied by this policy.
Contact and changes
For privacy questions or removal requests, contact [email protected]. Material changes to data access or use require updated disclosures and any necessary renewed authorization.