Rclone Privacy Policy

Effective date: October 24, 2026

We provide Rclone, a command-line program that lets you manage files across cloud storage services from your own computer. This policy explains how we handle information accessed through provider APIs, including Google APIs.

Information we access and how we use it

When you configure a storage provider, Rclone uses the authentication method offered by that provider—such as OAuth or HTTP cookies—to access the files and account information needed for the commands you run. The provider and the permissions you grant determine what Rclone can access.

We use that access only to carry out the file-management operations you initiate, such as listing, transferring, copying, or synchronizing files. Rclone processes data on your computer and communicates directly with the relevant storage provider’s servers. File contents may be held temporarily in your computer’s memory during operations. Rclone does not permanently save file contents to your local disk unless you run a command that saves them there.

Storage, security, and retention

Rclone stores its configuration—including provider authentication tokens—in a configuration file on your computer, typically named rclone.conf. We do not operate servers that store or process your personal data, and we do not receive your authentication tokens or file data. You are responsible for securing your computer and configuration file. Rclone includes an option to encrypt the configuration file with a password.

Configuration data remains on your computer for as long as you keep the configuration file. To remove it, delete the relevant provider configuration or delete the configuration file. You can also revoke Rclone’s access through your provider’s security or connected-app settings. Revoking access invalidates the applicable authorization and prevents Rclone from continuing to use it.

Sharing

We do not share your user data with third parties. Transfers initiated with Rclone take place directly between the computer running Rclone and the provider’s servers. The storage provider’s own privacy policy and terms apply to its handling of your data.

Your choices

You control which providers you configure, what commands you run, and which files you manage. You can stop using Rclone, remove provider credentials from your configuration file, or revoke Rclone’s access through the provider.

Changes to this policy

We may update this policy if our practices change. We will post the revised policy and update its effective date.