Privacy Policy

Last updated: 2026-09-23

Operator contact

Contact the operator at: mishapopov994@gmail.com

To fulfill MCP tool requests, this service processes:

OAuth tokens (Google OAuth client credentials and refresh token) used to obtain short-lived access tokens;
Spreadsheet identifiers, ranges, and spreadsheet contents (cell values / grid data) as needed to execute the requested Google Sheets API operations.

OAuth credentials and tokens are stored as Cloudflare Worker secrets, not in public source or static assets.
Access tokens may be cached briefly in Worker memory to reduce token endpoint calls.
This service does not sell, share, or disclose your tokens or spreadsheet contents to third parties, except as required to call Google APIs on your behalf.
Request metadata (e.g. rough rate-limit counters by IP) may be held briefly in memory and is not used for advertising.

Google Account → Security → Third-party access (or “Third-party apps with account access”) → remove this app’s access.
Rotate the Worker path secret (MCP_PATH_SECRET) and update your MCP client URL so previous URLs stop working.
Optionally revoke/rotate the Google OAuth refresh token and update Worker secrets.

This deployment is designed not to log secrets, client secrets, refresh tokens, full MCP URLs containing the path secret, or cell contents.