Privacy Policy

Last updated 5 October 2026.

What this service does

Thrift MCP lets Claude read and write a Google Sheet that you choose, on your behalf, after you authorize it with your own Google account.

What it accesses

Two Google scopes:

• https://www.googleapis.com/auth/spreadsheets — reading and writing Google Sheets.
• openid — a stable, anonymous account identifier, so your connection is recognized when you reconnect. No email address or profile information is requested.

Neither permits browsing, listing, or reading Google Drive, and no Drive scope is requested.

What is stored

• Google OAuth tokens for your Google account (a refresh token and short-lived access token), encrypted at rest (AES-GCM).
• A one-way hash of your Google account identifier. Your email address is not stored.
• The spreadsheet ID and tab name you select as your active sheet.

What is not stored

Spreadsheet contents are never stored or logged. Data passes through the server only to fulfill your own request and is discarded immediately. Cloudflare request logs record request paths and response status codes; sheet contents and tokens are never logged.

Sharing

Data is not sold, shared, or transferred to third parties. The only external service contacted is the Google Sheets API, on your behalf.

Revoking access

Revoke at any time at myaccount.google.com/permissions. To have stored tokens deleted, email yosef@cloudgeometry.com.

Contact

yosef@cloudgeometry.com