Privacy Policy

Effective date: October 21, 2026

This privacy policy describes how Bowling Subscriber ("the service") accesses, uses, stores, and protects information. The service is a personal automation tool operated by the owner of the Gmail account it monitors, hosted on Google Cloud Run.

Information We Access

The service connects to the Gmail API using OAuth 2.0 with a single read-only scope, https://www.googleapis.com/auth/gmail.readonly. This grants the service permission to read email messages and metadata (such as sender, subject, labels, and history identifiers) in the one Gmail account that completed the OAuth authorization flow. The service cannot send, modify, or delete email, and it does not request access to any other Google service.

How We Use Information

The service receives Gmail push notifications via Google Cloud Pub/Sub when the monitored inbox changes. In response, it reads new messages to identify bowling league invitation emails. When an invitation is found, the service parses the message content (such as the proposed date) and submits the league's sign-up form to accept the invitation on the account owner's behalf. Message content is processed transiently in memory for this purpose only.

Google user data is used solely to provide this invitation-acceptance functionality. It is not used for advertising, profiling, market research, or any other purpose, and it is never used to train machine learning models.

Information We Store

To avoid processing the same message twice and to resume from the correct point in the mailbox history, the service stores the following in a secured database:

Email subject lines and message bodies are not permanently stored. The OAuth refresh token used to access the Gmail API is stored as an encrypted Google Cloud secret and is never written to logs.

Information Sharing

The service does not sell, rent, trade, or otherwise share Google user data with any third party. Data leaves the service only in two ways: (a) API calls to Google (Gmail API, Google Cloud Pub/Sub) to perform the functions described above, and (b) submission of the bowling league's own sign-up form when accepting an invitation, which transmits only the information that form requests.

Data Retention and Deletion

Processing metadata (message IDs, history cursors, timestamps) is retained only as long as the service operates. You may revoke the service's access to your Google account at any time at myaccount.google.com/permissions; revoking access stops all further data access immediately. To request deletion of stored processing metadata, contact the operator at the address below and it will be deleted promptly.

Security

The service runs on Google Cloud Run and accepts only authenticated requests from Google-operated service accounts. Credentials are managed through Google Cloud Secret Manager, and all traffic is encrypted in transit with TLS.

Limited Use Disclosure

The service's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Policy

If this policy changes, the updated version will be published at this URL with a revised effective date.

Contact

Questions about this policy or requests to delete stored data may be sent to the operator of this service at the Gmail account this service monitors.