# Privacy Policy



> Privacy policy for ngs.io and the software applications distributed by Atsushi Nagase.


This privacy policy covers the ngs.io website and the software applications
distributed by Atsushi Nagase ("I", "me"), including open-source tools such as
[Google MCP Server](https://github.com/ngs/google-mcp-server) and
[Slack Bridge MCP Server](https://github.com/ngs/slack-bridge-mcp-server)
(collectively, "the Apps").

_Last updated: August 23, 2026_

## The website

ngs.io is a static website. It has no user accounts, no forms, and does not
itself collect or store personal information. It is hosted on GitHub Pages,
whose operator may collect standard server logs (such as IP addresses) as
described in the
[GitHub Privacy Statement](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement).

## The Apps

The Apps are tools that you download and run **on your own device**. They have
no backend operated by me: I do not receive, collect, store, or have any access
to your data through them.

### Google user data

Some Apps (such as Google MCP Server) connect to Google services — Google
Calendar, Drive, Gmail, Sheets, Docs, and Slides — using OAuth 2.0
authorization that you grant.

- **What is accessed**: only the data needed to perform the operations you
  explicitly request through the App (for example, listing your calendar
  events or reading a spreadsheet you specify).
- **Where it goes**: data retrieved from Google APIs is processed locally on
  your device and handed directly to the client application you connected the
  App to. It is never transmitted to me or to any third party, is not used for
  advertising, and is not sold.
- **What is stored**: OAuth tokens are stored in files on your own device so
  you do not have to sign in every time. No Google user data is stored by me.
- **Revoking access**: you can revoke the App's access at any time from your
  [Google Account permissions page](https://myaccount.google.com/permissions),
  and delete the locally stored token files to remove all remaining
  credentials.

The Apps' use of information received from Google APIs adheres to the
[Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy),
including the Limited Use requirements.

### Slack and other third-party services

Apps that connect to other services (such as Slack) follow the same principle:
they act as a local bridge using credentials you provide, process data only on
your device, and transmit nothing to me.

## Changes

I may update this policy from time to time. The latest version is always
available at this page, and material changes are recorded in the site's
[public repository history](https://github.com/ngs/ngs.io).

## Contact

Questions about this policy can be sent using the contact details on the
[About page](/about/#contact).