Privacy Policy

Last updated: 19 October 2026

Drive to MEGA (“the app”) is a static web page that copies files from your Google Drive to your MEGA account. It has no backend server, no database, no analytics and no advertising. This policy explains exactly what happens to your data.

What the app accesses

• Google Drive (read-only). When you click “Sign in with Google”, Google asks you to grant the https://www.googleapis.com/auth/drive.readonly scope. The app uses it only to list your files and folders, read your account email, name, profile photo and storage quota for display, and download the files you select for transfer. It cannot create, modify, share or delete anything in your Drive.
• MEGA. Your MEGA email and password are used in your browser by the open-source megajs library to log in to MEGA, list your folders, create folders and upload the files you chose. Files are encrypted in your browser by MEGA’s client-side encryption before upload.

Where your data goes

Data flows only between Google’s API → your browser → MEGA’s API. Nothing is sent to the operators of this site or any other third party. GitHub Pages, which hosts the static files, may keep standard web server logs (such as IP address and user agent) as described in GitHub’s privacy statement.

What is stored, and where

• Google access token — kept in memory only, expires after about an hour, and is revoked when you click “Disconnect”. Never written to disk.
• MEGA password and session — kept in memory only and discarded when you log out or close the page. Never written to disk.
• Preferences — theme, transfer options and (if you entered one) a Google OAuth Client ID are saved in your browser’s localStorage. You can erase them any time in Settings → “Erase all local data”.
• Offline cache — the app’s own HTML, CSS, JavaScript and icons are cached by a service worker so it loads offline. No file contents or API responses are cached.

Google API Services User Data Policy

Drive to MEGA’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing transfer feature you request, is not transferred to anyone except to MEGA at your explicit instruction, is not used for advertising, and is not read by humans.

Revoking access

Click “Disconnect” in the app, or remove access at any time from your Google Account permissions page. To end the MEGA session, click “Log out” or close the page.

Children

The app is not directed at children under 13 and does not knowingly collect any personal information.

Changes & contact

Changes to this policy are published on this page and in the public GitHub repository, which holds the full source code. Questions? Open an issue.