Last updated: September 30, 2026
GKit is a suite of Google Workspace productivity tools and browser extensions built and operated by Eshank Tyagi (MrEshank), a solo developer. This policy explains what data we collect, why, and how we handle it across the GKit web applications (including GKit Hub, SheetsAPI, and GDriveKit) and the GKit Browser Extension for Google Chrome and Chromium-based browsers. It is written in plain English because you deserve to actually understand it.
GKit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
When you sign in with Google, we receive basic profile information (name, email address, profile picture) via OAuth. We also receive an OAuth access token that allows GKit to interact with Google Workspace APIs (Google Drive and Google Sheets) strictly according to the permissions you grant. We do not receive or store your Google account password.
When you connect a sheet to SheetsAPI, your OAuth token is used exclusively to proxy authorized requests between your client application and the Google Sheets API. When an authenticated API request is made to your custom endpoint, GKit forwards that request to Google and returns the response. We do not read, analyze, index, or retain the contents of your Google Sheets.
GDriveKit provides storage analytics, folder size calculation, duplicate detection, and file organization. To calculate folder sizes or detect duplicate files, GKit reads file and folder metadata (such as file ID, file name, byte size, MIME type, and MD5 checksum) via the Google Drive API. GKit does not download, read, or analyze the textual or binary content of your files during scans. All cleanup or trashing actions require explicit confirmation from you and can be reversed via the undo queue.
The GKit Browser Extension operates under a strict privacy-first, zero-token client architecture:
chrome.storage.local. Temporary session identifiers are kept in chrome.storage.session and cleared upon browser exit.Your encrypted OAuth credentials are stored in Cloudflare KV on the secure Cloudflare edge so GKit can serve scheduled or authorized API requests without requiring continuous re-authentication. Your profile information (name, email) is stored in our database to identify your account and manage active subscriptions. We set a secure, httpOnly session cookie — __Secure-gkit.session-token— to keep you signed in.
Cloudflare's infrastructure logs standard access telemetry (IP address, timestamp, URL path) as part of normal CDN and firewall operation. We run no third-party behavioral analytics, trackers, or marketing pixels.
We do not sell, rent, monetize, or share your data with advertisers or data brokers. We do not use user content to train generalized AI or machine learning models. We do not inspect your browsing history or monitor unrelated tabs.
Google: Authentication, Google Drive, and Google Sheets services are provided by Google LLC. Your use of Google services is governed by the Google Privacy Policy.
Cloudflare: GKit services run on Cloudflare Workers and use Cloudflare KV for encrypted session management and global edge caching. See the Cloudflare Privacy Policy.
Your OAuth tokens and account profile data are maintained for as long as your GKit account remains active. You can disconnect your Google account or delete your entire GKit account at any time from the GKit dashboard. Upon disconnection, all stored OAuth tokens and cached metadata are permanently purged from Cloudflare KV and our database.
You have the right to access, export, or permanently delete all personal data and tokens associated with your account. You can also revoke GKit's access at any time through your Google Account Security Permissions.
Questions, security reports, or data inquiries regarding this policy? Contact Eshank Tyagi at contact@mreshank.com.