Side Calendar and Google user data
Side Calendar lets you connect your Google account so you can see and manage your Google Calendar events alongside your other calendars. This section explains what Side Calendar accesses in your Google account, why, and what happens to it.

What Side Calendar accesses and why
When you add a Google account, Side Calendar asks Google for the following permissions:

• Your Google account identity and email address (the openid and email permissions). Side Calendar uses these to tell your connected accounts apart and to show which account each calendar belongs to.
• See the list of Google calendars you're subscribed to (the calendar.calendarlist.readonly permission). Side Calendar uses this to show your calendars with their names and colours, so you can choose which ones to display. It can't change your calendars or their sharing settings.
• View and edit events on all your calendars (the calendar.events permission). Side Calendar uses this to show your events, and to create, change, move and delete events when you ask it to. When you change an event that has guests, Google may email those guests about the change, just as it would if you made the change in Google Calendar.

Side Calendar only uses this access to provide the calendar features you see in the app. It does not use your Google data for advertising, and it does not use it to develop, improve or train AI or machine learning models.

Your calendar data stays on your PC
Side Calendar connects directly from your PC to Google. Your events are held in the app while it runs so it can show them. Your account's email address is saved in the app's settings on your PC, and the sign-in token that lets Side Calendar stay connected is stored in Windows Credential Manager on your PC. Side Calendar's diagnostic log on your PC never records event contents or sign-in tokens.

Nothing is sent to Creakyhat or shared
CreakyHat has no servers that receive your Google data. Your Google account information and calendar data are never sent to CreakyHat, and are never sold, transferred or shared with anyone else. Side Calendar contains no analytics or advertising that could receive this data.

How your Google data is protected

• Encrypted in transit. Side Calendar only communicates with Google over HTTPS (TLS encryption). Sign-in uses Google's OAuth 2.0 with PKCE (Proof Key for Code Exchange). Your Google password is entered only on Google's own sign-in page and is never seen or stored by Side Calendar.
• Encrypted at rest. The sign-in token that keeps Side Calendar connected is stored in Windows Credential Manager, which encrypts it so that only your Windows user account can read it. It is never written to a file in plain text.
• Minimal storage. Calendar events are held only in the app's memory while it is running, and are discarded when the app closes. The only Google information saved on disk is your account's email address and ID, and the IDs of any calendars you hide or choose as your default. These are kept in Side Calendar's settings file inside your Windows user profile, which Windows protects from other user accounts on the PC.
• No access by CreakyHat. Because Side Calendar has no servers and sends nothing to CreakyHat, no CreakyHat staff or systems can access your Google data. There is no copy of it anywhere except on your PC and in your Google account.
• Limited access. Side Calendar requests only the permissions it needs for its calendar features, and uses them only while you are using the app.
• Retention and deletion. Your sign-in token is kept until you remove the account in Side Calendar, which deletes it from your PC and revokes Side Calendar's access with Google. Uninstalling Side Calendar deletes its settings.
• Security issues. If you believe you have found a security problem in Side Calendar, contact info@creakyhat.co.uk and we will investigate it promptly.

Disconnecting and deleting your data
To disconnect, remove the account in Side Calendar's settings. Side Calendar then deletes the sign-in token from your PC and asks Google to revoke its access. You can also remove Side Calendar's access at any time from your Google account at myaccount.google.com/connections. Uninstalling Side Calendar removes its settings from your PC.

Limited Use
Side Calendar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.