Privacy Policy

Last updated: October 5, 2026

What We Collect

When you use Papermatica, we may collect the following:

• Google account info: If you sign in with Google, we store your name, email address, and Google account ID so you can access your printers and settings.
• Google Calendar data: If you connect a calendar, we read event details (titles and times) from the calendars you select, only to print your daily calendar. Calendar access is read-only — we never create, modify, or delete events.
• Uploaded images: Images you upload are processed for thermal printing and stored temporarily on our server.
• Print job data: We store print job records (content and timestamps) to manage the print queue.
• Printer data: We store each printer's status, model-reported diagnostics, and the secret URL key that identifies it.
• Server logs: Standard web server logs including IP addresses, browser type, and pages visited.

How We Use Your Data

• To process and send your content to the receipt printer(s) you've registered.
• To sign you in and keep your printers, settings, and calendar connection associated with your account.
• To operate and maintain the service.
• We do not sell, share, or distribute your data to third parties.

Google API Services — Limited Use

Papermatica's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How We Protect Your Data

• Least privilege: We request only read-only Google Calendar access (https://www.googleapis.com/auth/calendar.readonly). We cannot create, edit, or delete events. Basic sign-in scopes (openid, email, profile) are used only to identify your account — Papermatica does not request any other Google API scope.
• Credential storage: Your Google OAuth access and refresh tokens, and our Google client credentials, are stored server-side outside the public web root, in files readable only by the service account (file permissions 0600). They are never sent to your browser and are never shared with third parties. Requesting those files over the web returns 404.
• Encryption in transit: All traffic to and from Papermatica is encrypted with HTTPS/TLS, and requests made over plain HTTP are redirected to HTTPS. Calls to Google's APIs are also made over HTTPS.
• Access control: Signing in is required to view your printers and settings, and each printer is addressed by a secret key. Server and database access is limited to the site administrator.

Printer URLs

Each printer you register gets a private URL containing a secret key. Anyone with that URL can send print jobs to your printer, so treat it like a password. You can delete a printer at any time to retire its URL.

Image Storage

Uploaded images are processed for thermal printing and stored on the server. These images are not shared publicly but may be accessible via direct URL. Do not upload sensitive or private images.

Cookies

Papermatica uses a single session cookie to keep you signed in. We do not use tracking cookies or third-party analytics.

Third-Party Services

The site is served through Cloudflare, which may collect standard connection metadata as part of its CDN and security services. Sign-in and calendar features are provided by Google; their use of your data is governed by Google's privacy policy.

Children's Privacy

Papermatica is a family-friendly service. We do not knowingly collect personal information from children under 13.

Data Retention and Deletion

We retain Google user data only for as long as needed to provide the service:

• Google account info (name, email address, Google account ID) is retained for as long as your account exists.
• Calendar access tokens (access and refresh tokens) are retained until you disconnect the calendar or revoke Papermatica's access in your Google account.
• Calendar event data is read at print time. The printed output — which may include event titles and times — is stored as a print job in your print queue and retained until you delete it; print jobs are not automatically purged.
• Uploaded images are stored on the server for printing and retained until removed.

How to delete your data. You can revoke Papermatica's access to your Google account at any time at myaccount.google.com/permissions; this immediately stops all further calendar access. You may also request deletion of the Google user data we store — your account record, stored OAuth tokens, and associated print history — by contacting the site administrator. We will carry out such deletion within 30 days of the request. Deleting a printer removes its stored association.

Changes

We may update this policy from time to time. Changes will be reflected on this page with an updated date.

Contact

Questions about this policy? Reach out to the site administrator.