Privacy policy

1. Introduction

Flash Table is an independently developed, local-first timetable planning application operated by a private individual and available at timetable.lagoom.dev. In this policy, “Flash Table,” “we,” “us,” and “our” refer to that individual operator and the application.

This policy explains how information is accessed, used, stored, and shared when you use the application, including its optional Google sign-in and Google Drive features. Flash Table is not operated by a company or other organization.

2. Information we process

Local timetable data

Flash Table stores its working data in your browser’s local database. This may include teacher names and availability, subjects, grades, lesson periods, timetable configuration, generated timetable entries, locks, and application metadata.

This information remains on your device unless you explicitly export it, upload a backup to Google Drive, or otherwise provide it to another party. You are responsible for having permission to enter information about other people.

Google account information

If you choose to sign in with Google, Flash Table receives your Google account identifier, verified email address, display name, and profile picture when available. We use this information only to authenticate you and display your optional account profile.

Google Drive information

When you choose to back up or restore data, Flash Table requests the Google Drive drive.file permission. It uses that permission to create Flash Table JSON backups, list backups created by Flash Table, read a backup you select for restoration, and show limited metadata such as its name, creation date, and size.

Flash Table does not intentionally access unrelated Drive files. A backup may contain all local timetable and configuration data described above.

Technical information

Our hosting and network providers may process limited technical data needed to deliver and protect the application, such as IP address, browser and device information, request timestamps, requested pages, and security or diagnostic information. Flash Table does not currently use third-party advertising or behavioral analytics.

3. How we use information

We process information only to:

• Provide timetable creation and management features
• Authenticate users who voluntarily sign in
• Display the signed-in user’s name and profile picture
• Create and restore user-requested Google Drive backups
• Maintain security and diagnose technical failures
• Comply with applicable legal obligations

We do not use personal information for targeted advertising, credit decisions, data brokerage, or generalized artificial-intelligence or machine-learning model training.

4. Google API Limited Use disclosure

Flash Table’s use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Google user data is used only for the visible sign-in, backup, and restore features requested by the user. It is not sold, used for advertising, transferred to data brokers, used to determine creditworthiness, or used to train generalized AI or machine-learning models.

5. Storage and retention

Local data

Timetable data remains in your browser until you delete or reset it, clear Flash Table’s site data, reset the browser, or replace it by restoring another backup.

Account and authorization sessions

After Google sign-in, your basic profile is stored in an encrypted, HTTP-only session cookie for up to 30 days. Signing out removes the session. OAuth security information and Google Drive access tokens are kept in encrypted, HTTP-only cookies for up to 10 minutes. Drive access tokens are used for the requested operation, and Flash Table does not request or retain a Google refresh token.

Google Drive backups

Backups remain in your Google Drive until you delete them. Backup contents pass through the Flash Table server only as needed to complete an upload or restore; Flash Table does not intentionally retain a persistent server-side copy.

6. Cookies

Flash Table uses essential cookies only to maintain an optional signed-in session, protect the Google OAuth flow, and temporarily authorize a requested Google Drive operation. These cookies are not used for advertising or cross-site behavioral tracking.

7. Sharing and service providers

We do not sell or rent personal information.

Information may be processed by:

• Google, when you use Google sign-in or Google Drive
• Cloudflare, which provides application hosting, network delivery, and security

These providers process information under their respective terms and privacy policies. We may also disclose information when reasonably necessary to comply with law, enforce legal rights, or protect users and the application.

8. Security

Flash Table uses safeguards including HTTPS, encrypted HTTP-only same-site cookies, OAuth state validation, Proof Key for Code Exchange (PKCE), short-lived Drive authorization, and backup validation before restoration. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

9. Your choices and controls

You can:

• Use Flash Table without signing in
• Export your local database as a JSON file
• Delete or reset local data through Flash Table or your browser
• Sign out to remove your Flash Table account session
• Delete Flash Table backup files directly from Google Drive
• Revoke Flash Table through your Google Account permissions

10. Children’s privacy

Flash Table is intended for educators and timetable administrators. It is not directed to children under 13, and Google sign-in is optional. We do not knowingly collect personal information directly from children.

11. International processing

Google, Cloudflare, and other infrastructure providers may process information in countries other than your own under their respective privacy policies and applicable data-protection safeguards.

12. Changes to this policy

We may update this policy when Flash Table’s features or data practices change. If a material change affects how Google user data is used, we will update this policy and obtain any consent required before using that data for a new purpose.