นโยบายความเป็นส่วนตัว

Privacy Policy

Effective 28 October 2026

This policy describes KhianKrub at khiankrub.app, developed and operated by Chanon Sarasuk. Contact khiankrub@gmail.com with privacy questions or requests.

1. Documents and settings

Documents are opened, edited and formatted in your browser. Document contents are not uploaded to the operator's servers for processing. Interface and language settings are stored in your browser's local storage. A local save downloads a file or uses your browser's file-saving controls.

2. Google Drive data and its use

Drive is optional. Choosing Connect loads Google's sign-in service and requests https://www.googleapis.com/auth/drive.file, covering files you select for the app or create with it, rather than all your Drive files.

The app accesses file contents, names, IDs and version numbers to display and open documents, create copies, or save back to the opened file when you request it. Save-back checks the Drive version first and refuses when it detects a change. Transfers go directly between your browser and Google. There is no automatic saving to Drive.

Short-lived Google access tokens stay in the tab's memory and are not stored in local storage. KhianKrub does not request or store your Google password. Google data is used only to provide document opening, editing and saving. It is not sold, used for advertising or AI model training, or shared with analytics providers. Document contents are not sent to the connection service.

To stay connected between visits, the service at drive.khiankrub.app stores Google access and refresh tokens encrypted in a Cloudflare D1 database, with the encryption key stored separately. Your browser receives a necessary Secure, HttpOnly connection cookie. The service receives no document contents and does not need to store your Google name, email address or password.

The connection expires after one year without use, and expired records are periodically deleted. Google may expire or revoke access sooner. Disconnect Google Drive deletes the stored connection credentials and cookie and requests revocation at Google. If that request cannot reach Google, you can revoke access in your Google Account. Clearing cookies alone does not immediately delete the server record. Encrypted records may remain in database backups until the hosting provider's backup-retention cycle ends.

Cloudflare hosts the connection service and encrypted database and receives technical request information, such as IP addresses, to operate its service. See Cloudflare's Privacy Policy.

KhianKrub's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google's services are also governed by Google's Privacy Policy.

3. Local recovery and retention

Recovery is enabled by default. Unprotected documents you edit, including those opened from Drive, may be saved in this browser's IndexedDB, with text, formatting and embedded media. The latest and previous recovery copies stay on the device and are not sent to KhianKrub servers.

Copies remain until you discard them, clear site data, or the browser removes them. Downloads do not remove recovery copies. File → Options → General can stop new snapshots but does not delete existing copies. Password-protected documents are excluded from new automatic snapshots; earlier unprotected copies remain until removed.

People sharing the same browser profile may be able to recover your documents. Clearing site data, private browsing, device failure and storage limits can remove or prevent recovery copies. Recovery is not a backup guarantee.

4. Deletion and revoking access

• Use Manage recovery drafts to restore, download or discard browser copies.
• Clear khiankrub.app site data in your browser to remove settings and recovery copies.
• Revoke KhianKrub's permission in your Google Account connections. Revoking access does not delete local recovery copies, downloads or Drive files.
• Manage or delete saved files directly in Google Drive or on your device.

5. Hosting, analytics and contact messages

GitHub Pages hosts the site and receives technical request information, such as your IP address, to deliver files and operate its service under the GitHub Privacy Statement. KhianKrub's operator does not set the providers' log-retention periods.

The editor page uses Cloudflare Web Analytics for visit counts and loading performance. It uses no cookies or local storage to track visitors. Metrics may include page URLs, referrers, browser type and timings. The provider receives an IP address as part of a network request, but no document contents or Google tokens. See Cloudflare's Privacy Policy.

If you email or submit a problem report, the operator receives what you provide, such as the issue description, app version, browser information and any email address you choose to give, to investigate and reply. Avoid including unnecessary private document contents. Request deletion of your submitted contact information at khiankrub@gmail.com.

6. Changes

Changes to data handling will be reflected here with an updated effective date. New uses of Google data will be explained and consent requested as required by Google.