Privacy Policy

Effective October 14, 2026

CalPush finds the calendar events in text you write or paste, and lets you add them to your own Google Calendar. It is a personal project. This page explains what information CalPush handles, on the website at calpush.weesync.us and in the CalPush for Google Messages browser extension.

In short: CalPush has no accounts and no database. It does not store your text, your events or your Google data, and it does not sell or share them.

Text you type or paste

• As you type, your text is sent over an encrypted connection to the CalPush server so it can find dates, times and places. The server sends back the events it found and keeps nothing: the text is not saved, logged or used for anything else.
• The text is not kept in your browser either. Reloading the page clears it.

Your Google account

If you click Create event, CalPush asks Google for permission to view and edit events on your calendars (the calendar.events permission). CalPush uses that permission only to:

• add an event to your primary calendar when you click Create event; and
• delete that same event if you click the delete button on its card.

CalPush does not read, list, change or delete any other events, and does not access any other Google data.

• Sign-in happens between your browser and Google. The access Google grants stays in your browser's memory for that visit and is sent only to Google. It never reaches the CalPush server and is not stored anywhere.
• CalPush does not receive or keep your name, email address, profile or calendar contents.
• You can withdraw the permission at any time at myaccount.google.com/permissions.

CalPush's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not transferred to anyone, is not used for advertising, and is not used to develop or train AI or machine-learning models.

The Google Messages extension

• The extension reads the messages shown in the conversation you have open at messages.google.com so it can underline dates and times.
• Only messages that look like they mention a day or a time are sent to the CalPush server to be parsed, the same way as text typed on the website. Nothing is stored. Other messages never leave your browser.
• The list of events you chose to ignore is saved in the extension's own storage on your computer.
• The extension does not sign in to your Google account. Create event opens Google Calendar with the event filled in for you to save.

How your data is protected

• Encryption in transit. All traffic between your browser and the CalPush website, and between your browser and Google, uses HTTPS (TLS). Pages loaded over plain HTTP are redirected to HTTPS before any text is sent.
• Your Google access token never leaves your browser except to go to Google. It is held only in the memory of the open page, is not written to disk, local storage or cookies, and is never sent to the CalPush server. Google makes it expire after about an hour.
• Least privilege. CalPush requests a single permission, calendar.events, and uses it only for the two actions described above. Sign-in uses Google's own sign-in window, so CalPush never sees your Google password.
• No stored data to breach. The CalPush server has no database, no file storage and no logging of request contents. It processes each request in memory and discards it as soon as the response is sent, so there is no copy of your text, events or Google data on CalPush's side.
• Limited access. Only the developer has access to the Cloudflare and Google Cloud accounts that run CalPush, and only the developer can change or deploy it.

Data retention and deletion

• Text you type or paste: not retained. It is discarded as soon as the events are sent back to your browser, and is cleared from the page when you reload or close it.
• Google user data: CalPush does not retain any. The access token is deleted when you close or reload the page, or when it expires after about an hour, whichever comes first. CalPush keeps no copy of your name, email address or calendar events.
• Events you create: these are stored in your own Google Calendar, not by CalPush. You can delete one with the delete button on its card in CalPush, or at any time in Google Calendar.
• Revoking access: you can remove CalPush's permission at any time at myaccount.google.com/permissions. Because CalPush stores no Google user data, there is nothing further to delete on our side, but you can email the address below to ask, and we will reply within 30 days.
• Settings in your browser: the date-order setting and the extension's list of ignored events stay on your device until you clear your browser data or remove the extension.

What is kept in your browser

The website saves one setting in your browser's local storage: whether dates like 03/04 are read month first or day first. CalPush sets no cookies and uses no analytics or advertising trackers. Google's sign-in window may set its own cookies, under Google's privacy policy.

Hosting

CalPush runs on Cloudflare. Like any web host, Cloudflare processes technical information such as your IP address in order to deliver the site and protect it from abuse, under Cloudflare's privacy policy. CalPush does not add any logging of its own.

Children

CalPush is not directed at children under 13 and does not knowingly collect information from them.

Changes

If this policy changes, the new version will be posted on this page with a new effective date.

Contact

Questions about this policy: jefflathbury@gmail.com.