Privacy
RestoreLink is open source software that Glenn Paulin runs on their own server. This page says what that installation keeps and why.
What is kept
- Your sign-in: the name and e-mail address your sign-in provider (Google or GitHub) gives, to know who you are.
- Your sites: each WordPress site you connect: its name, its address, and a secret key the dashboard made for it, stored encrypted.
- A log of what you did: snapshots, comparisons, restores and copies, with their status and times.
- Storage you connect: for Google Drive, a lasting access token (encrypted) and the id of the "RestoreLink" folder it made; for S3-compatible storage, the keys you entered (encrypted).
Google Drive
When you connect Google Drive, RestoreLink asks for one permission, drive.file. It lets RestoreLink see and manage only the files and folder it creates itself. It cannot read anything else in your Drive. It uses that access only to store, check, download and delete the snapshot copies you ask for.
If you choose to restore from a backup file already in your Drive, RestoreLink asks for a second, optional permission, drive.readonly. It lets RestoreLink list and read your files, and never change or delete them. It is used only to list your .zip files for you to pick from, and to copy the one you choose into the RestoreLink folder. It does not keep a list of your files. The WordPress site you restore is never given this permission: it is given a token that can only reach files RestoreLink made, which includes that copy. You can remove either permission at any time.
RestoreLink's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The data is not sold, not used for advertising, and not shared with anyone.
Your site's data
A snapshot contains a site's files and database. It travels directly from your site to the storage you chose (it does not pass through this dashboard) and is kept there until you delete it. Treat the storage like the backup it is.
Ending it
- Remove a storage on the Storage page to make the dashboard forget its keys or token. Files already in it stay until you delete them there or from the snapshots page.
- To revoke Google's access yourself, remove RestoreLink at myaccount.google.com/permissions.
- Remove a site on its page to delete its key and its history from the dashboard.
Contact
Write to glenn@whitelabelpress.com.