Privacy Policy
Last updated: January 9, 2026
What data we access
Year View connects to your Google Calendar using read-only access. We access your calendar events solely to display them in our year view format. We request the following permissions:
- Read your calendar events (calendar.readonly)
- View your email address and basic profile information
What we store
We store the following data:
- OAuth tokens: Stored securely in encrypted HTTP-only cookies in your browser
- Calendar preferences: Which calendars you've selected to display (stored locally in your browser)
We do NOT store your calendar events on our servers. Events are fetched directly from Google's servers each time you view the calendar.
What we don't do
- We never create, modify, or delete your calendar events
- We never share your data with third parties
- We never sell your data
- We never use your data for advertising
- We never store your calendar events on our servers
Data security
Your OAuth tokens are encrypted and stored in HTTP-only cookies, which means they cannot be accessed by JavaScript running in your browser. All communication with Google's servers uses HTTPS encryption.
Data deletion
To remove Year View's access to your Google Calendar:
- Go to your Google Account → Security → Third-party apps
- Find "Year View" and click "Remove Access"
- Clear your browser cookies to remove the local session
Third-party services
Year View uses the following third-party services:
- Google Calendar API: To fetch your calendar events
- Vercel: For hosting the application
Changes to this policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact
If you have any questions about this privacy policy, please contact us at bernat@fornes.dev