Privacy Policy

Last updated: September 2026

Hi! We're glad you're here.

CalDAV Bridge exists for one purpose: to keep your CalDAV calendar synchronized with Google Calendar. We believe privacy should be straightforward, so we've written this policy in plain English.

We only collect the information needed to provide the service. We don't sell your data, we don't run advertising, and we don't include third-party tracking or analytics.

Information We Collect

Your Google Account

When you sign in with Google, we receive:

• Your name
• Your email address
• Your Google account ID
• An encrypted Google OAuth refresh token so synchronization can continue after you sign in

The Google Calendar permission requested by CalDAV Bridge is intentionally limited. It only allows access to the Google calendar created by this application.

CalDAV Bridge cannot read, modify, or delete your existing Google calendars.

Your CalDAV Account

When you connect a CalDAV account, we store:

• Your CalDAV server address
• Your username
• Your encrypted password
• The calendar you choose to synchronize

Your password is encrypted before it is stored and is never kept in plain text.

Calendar Data

To synchronize calendars, we store information such as:

• Event titles
• Start and end times
• Event status
• RSVP status
• Technical identifiers (such as iCal UID, sequence number, and synchronization metadata)

This information is used solely to detect changes and keep your calendars synchronized.

Subscription Information

If you subscribe to CalDAV Bridge Pro, payments are processed by Stripe.

We may store:

• Your email address
• Stripe customer ID
• Subscription status
• Subscription plan
• Renewal information

We never receive or store your credit card number. Payment details are collected directly by Stripe.

What We Don't Collect

CalDAV Bridge does not:

• Sell your personal information
• Display advertising
• Include third-party analytics or tracking scripts
• Share your information with marketing companies
• Track your activity across the web

How We Use Your Information

We use your information only to:

• Authenticate your account
• Connect to your CalDAV provider
• Synchronize your calendars
• Process subscriptions
• Maintain secure login sessions
• Diagnose and fix synchronization issues

Your calendar data is never used for advertising, profiling, or training AI models.

Third-Party Services

To provide the service, CalDAV Bridge relies on:

• Cloudflare for hosting, secure storage, sessions, and synchronization infrastructure.
• Google for authentication and access to the dedicated Google calendar created by CalDAV Bridge.
• Your CalDAV provider (such as Zoho, iCloud, Fastmail, Nextcloud, or another compatible provider).
• Stripe for payment processing and subscriptions.

Each provider only processes the information necessary to perform its role.

Security

We take protecting your information seriously.

Security measures include:

• Encryption of Google refresh tokens
• Encryption of CalDAV passwords
• HTTPS for all communication
• Secure HTTP-only session cookies
• Cryptographically signed RSVP links
• Verification of Stripe webhook signatures

While no online service can guarantee absolute security, we follow industry-standard practices to protect your data.

Cookies

CalDAV Bridge uses two cookies, both required for the service to function - neither is used for tracking or advertising:

• Session cookie - keeps you signed in. Secure, HTTP-only, and expires 30 days after sign-in.
• Sign-in state cookie - protects the Google sign-in process from tampering. Secure, HTTP-only, and expires after 10 minutes.

Error Logs

If synchronization fails, operational logs may temporarily include limited information such as an event title or technical event identifier to help diagnose and resolve the issue.

These logs are used solely for troubleshooting and improving reliability.

Data Retention

Your account information and synchronization data are retained while your account remains active.

Login sessions expire 30 days after you sign in.

At this time, CalDAV Bridge does not offer self-service account deletion, calendar disconnection, or data export. If you would like a calendar disconnected or your data deleted, please contact us and we'll take care of it.

Your Choices

You may:

• Stop using CalDAV Bridge whenever you choose.
• Contact us to disconnect a calendar, delete your account, or request your data be removed.
• Reach out with questions about how your information is handled.

Children's Privacy

CalDAV Bridge is not intended for children under the age of 13, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. If we make significant changes, we'll make a reasonable effort to notify users.

Contact

Questions, concerns, or privacy requests are always welcome.

Kyle Venberg
remote24
kyle@remote24.media