Privacy Policy

Cloud Drive Sync · Last updated 14 October 2026

Cloud Drive Sync is an open source Obsidian plugin that keeps a vault in sync with Google Drive or with S3 compatible storage. This policy explains what the plugin does with your information, and in particular what it does with data from your Google Account.

The short version

Cloud Drive Sync has no server. Your notes travel directly between your device and storage you control. Nothing is sent to the developer, and the plugin contains no analytics, tracking or crash reporting.

Google Account data

If you connect Google Drive, the plugin requests one permission and no others:

drive.file

Lets the plugin create and manage only the files it creates itself. It cannot see, open or list anything else in your Drive.

On first use the plugin creates a folder called Obsidian Vaults (Cloud Drive Sync) in your Drive, and each vault you sync gets a folder inside it. You can rename or move that folder in Drive. Because of the narrow permission above, files you add to it yourself are not visible to the plugin.

How the data is used

Only to sync your vault: listing, uploading, downloading and deleting the files the plugin manages in its own folder. There is no other purpose.

• It is not sold, rented or traded.
• It is not shared with any third party, because the developer never receives it.
• It is not used for advertising or profiling.
• It is not used to train machine learning models.

Google user data obtained through the permission above is used only to provide the sync feature you turned on, and is never transferred to anyone else except as required by law. Cloud Drive Sync complies with the Google API Services User Data Policy, including its Limited Use requirements.

What is stored on your device

The plugin keeps its settings in Obsidian's plugin data file, .obsidian/plugins/cloud-drive-sync/data.json inside your vault. That includes your Google sign-in tokens or S3 credentials, the sync folder, and a record of the last sync. The file is stored as plain text, as Obsidian stores all plugin settings. The plugin never syncs it, but another sync or backup tool that copies your .obsidian folder would copy it too.

Who the plugin talks to

• Google, to sign you in and to read and write the files the plugin created in your Drive. Only once you connect Google Drive.
• Your own S3 endpoint, if you configure one. You choose the address.
• This website, once, during Google sign-in. Google sends your browser to cloud-drive-sync.pages.dev with a one-time authorization code in the address, and the page shows it so you can paste it into Obsidian. The page is static, stores nothing, and sends the code nowhere. The code expires within minutes, can be used only once, and is useless without your own OAuth client secret.

There is no server operated by the developer that receives your notes or your account information.

Removing access

• Revoke access at myaccount.google.com/permissions. The plugin immediately loses all access to your Drive.
• Delete the Obsidian Vaults (Cloud Drive Sync) folder in your Drive if you also want the synced copies gone. Revoking access alone does not delete them.
• Click Disconnect in the plugin's settings, or uninstall the plugin, to clear the tokens stored on your device.

Children

Cloud Drive Sync is not directed at children under 13 and does not knowingly collect information from them. It collects no personal information from anyone.

Changes

If this policy changes, the date at the top changes with it. The full history is in the repository.

Contact

Questions about this policy or the plugin can go to GitHub issues.