Humidor privacy
Last updated October 29, 2026
Humidor is a small personal app for tracking cigars, resting times and smokes, shared among friends. It is not a business and shows no ads.
Where your humidor is kept
- In a Humidor folder in your own Google Drive (the file
humidor.jsonplus a dated backup each day), and on your device so the app works offline. - Your humidor data goes directly between your device and Google Drive. It is not sent to or stored on Humidor's servers.
- If you choose "Use it without an account", everything stays on that one device only.
What Humidor can access in your Google account
- Only the files Humidor creates in your Google Drive (Google's
drive.filepermission). It cannot see, open or change any other files in your Drive. - Your email address, to show which account you're signed in with.
What the sign-in service stores
So you don't have to sign in again every hour, a small sign-in service (hosted on Cloudflare) keeps:
- your email address and an encrypted Google sign-in token for the permission above;
- for each device you sign in on, a random session identifier (stored only as a one-way hash), which expires after 180 days without use.
It does not store anything about your cigars or smokes. The person who runs this copy of Humidor technically holds the keys that could use that token to open the files Humidor created in your Drive. Nothing else in your Drive is reachable this way.
Removing access
- In Humidor: Settings → sign out everywhere ends every session and removes the stored token.
- Or at any time in your Google account: myaccount.google.com/permissions → Humidor → Remove access.
- Your Humidor folder stays in your Drive until you delete it.
Sharing
Your data is not sold, shared or used for anything other than running the app for you. Humidor's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.