Privacy policy

Last updated: September 27, 2026.

brocco.tools provides public utilities and a private dashboard for its owner. Public registration is disabled.

Google account and Calendar data

Google sign-in provides basic account information, including an account identifier, email address, and profile information, to authenticate the owner through Supabase. Sign-in alone does not grant Calendar access.

Connecting Google Calendar separately grants read-only access to the account’s calendar list and events. The dashboard uses calendar names for its picker and event titles and times to display upcoming events from selected calendars. Selecting calendars limits what the dashboard fetches and displays; it does not narrow Google’s underlying permission. Brocco does not create, edit, or delete Google Calendar events.

Storage and use

Supabase stores account records, dashboard settings and saved content, selected calendar identifiers, and encrypted provider tokens. Tokens allow the server to refresh connected data without repeated sign-in. Calendar results are temporarily cached in server memory. Vercel hosts the application, and these providers process data needed to operate it.

Google data is used for authentication and the owner’s dashboard, including requests through owner-authorized automation. It is not sold, used for advertising, or used to train AI models. Brocco’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Other connections and browser storage

If connected, Spotify supplies current playback information for the dashboard, and the owner's Spotify page reads playback, the queue, the library, and playlists. Last.fm, Deezer, and MusicBrainz supply listening statistics and recording details for it. Weather and Twitch features request the data needed for configured locations and channels. The site uses cookies for sign-in and browser storage for preferences such as the selected theme. Hosting and service providers may retain operational and security logs.

Disconnecting and deletion

Disconnecting a provider in the dashboard deletes its stored connection, including tokens and calendar selections. It does not delete events from Google or delete the Brocco sign-in account. Google permissions can also be revoked in Google account connections. Other saved account and dashboard data remains until the owner deletes it. Provider backups and logs may follow separate retention schedules.

For privacy questions or deletion requests, contact the site’s operator through brocco.site.