Privacy Policy

Last updated: 2026-09-20

Operator: Владислав (personal app «Корж Sheets MCP»). Contact: nexa.korzh@gmail.com

What this service is

A personal Model Context Protocol (MCP) endpoint that calls the Google Sheets API on behalf of the operator to read and write spreadsheet data requested by an authorized AI client.

Data we process

• OAuth credentials: Google OAuth client ID/secret and refresh token stored as encrypted Cloudflare Worker secrets (environment secrets), not in source code.
• Access tokens: short-lived Google access tokens obtained via refresh, kept in Worker memory only.
• Spreadsheet contents: cell values and metadata are processed only to fulfill the specific MCP tool call (get/update/append/clear). They are not sold, not used for advertising, and not shared with third parties except Google (API) and Cloudflare (hosting transport).
• MCP path secret: a random secret in the URL path that authenticates the MCP client.

What we do not do

• We do not sell personal data.
• We do not use spreadsheet contents to train models.
• We do not intentionally log cell values or OAuth tokens.

Storage and retention

Secrets live in Cloudflare Worker secrets until rotated or deleted by the operator. Spreadsheet payloads are not persisted by the Worker beyond request handling.

How to revoke access

1. Google Account → Security → Third-party access → remove this app.
2. Rotate or delete GOOGLE_REFRESH_TOKEN and MCP_PATH_SECRET in Cloudflare.

Contact

nexa.korzh@gmail.com

Home · Terms