Privacy Policy

Last updated: February 24, 2026

GDI Web ("we", "our", or "us") operates the web application at web.zindex.eu.org (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. Information We Collect

We collect and process the following types of information:

• Google Account Information: When you sign in with Google, we receive an OAuth access token and refresh token to authenticate with Google Drive on your behalf. We access your basic profile information only to facilitate the authentication process.
• Service Account Credentials: If you choose to authenticate using a Google Service Account, you provide the service account JSON credentials directly in the browser.
• File URLs: URLs you provide for uploading files to Google Drive are processed through our Service to facilitate the transfer.
• Google Drive Data: We access your Google Drive files and folders solely to perform the upload, download, and file browsing operations you request.

2. How We Use Your Information

Your information is used exclusively to:

• Authenticate your access to Google Drive
• Upload files from provided URLs to your Google Drive
• Download files from your Google Drive
• Browse files and folders in your Google Drive
• List your shared drives

3. Data Storage and Security

• Client-Side Storage: Authentication tokens (refresh tokens) are stored locally in your browser's localStorage. They are never stored on our servers.
• No Server-Side Storage: We do not store your Google credentials, personal data, or file content on our servers. Our Service acts as a pass-through proxy for file transfers.
• Encryption: All communications between your browser and our Service, and between our Service and Google APIs, are encrypted using HTTPS/TLS.

4. Third-Party Services

Our Service interacts with the following third-party services:

• Google OAuth 2.0: For user authentication
• Google Drive API: For file management operations
• Cloudflare: Our Service is hosted on Cloudflare Workers infrastructure

Please review Google's Privacy Policy for information on how Google handles your data.

5. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. Your data is only shared with Google's services as necessary to perform the operations you request.

6. Your Rights

You have the right to:

• Revoke Access: You can revoke our application's access to your Google account at any time through your Google Account settings.
• Delete Local Data: You can clear your browser's localStorage to remove any stored tokens.
• Log Out: Use the logout button in the application to clear your session.

7. Google API Services User Data Policy

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us:

• GitHub: github.com/PBhadoo
• Telegram: @HashHackers