Privacy Policy

Last updated: 23 May 2026

This site (gavinslater.com) is the personal website and portfolio of Gavin Slater. This policy covers (1) data collected from visitors to this website and (2) data accessed by personal OAuth applications operated by Gavin Slater under this domain's Google Cloud project.

Website visitors

This site uses Vercel Analytics to collect anonymous, aggregate visit metrics (pages viewed, country, referrer, device class). No personally identifying information is collected, no cookies are set for tracking, and no data is sold or shared with third parties for advertising. See Vercel's privacy policy for further detail on what their analytics collect.

Some pages of the site (career portfolio, blog) may include optional contact forms or login flows. Where these exist, any personal information you provide is used solely to respond to your request and is not shared with third parties.

Personal OAuth applications

Gavin Slater operates personal OAuth applications (including one currently named "Gavin's Second Brain") registered under his personal Google Cloud project. These applications are for personal use only — they exist to give Gavin programmatic access to his own Gmail inbox and Google Calendar from his own machines, via local command-line tools and MCP (Model Context Protocol) servers running on his local computer.

Scopes requested:

  • https://mail.google.com/ — full Gmail access (read, send, label, delete, draft management) on the authorising user's own mailbox
  • https://www.googleapis.com/auth/calendar — read and write access to the authorising user's own Google Calendar

Data accessed under these scopes is processed locally on Gavin's own devices. No data is uploaded to any third-party service, sold, shared, or used for advertising. No data is collected from other users — the applications are not multi-tenant and have no other registered users.

If you have somehow ended up at this OAuth consent screen and you are not Gavin Slater, please do not authorise the application. Close the tab and contact Gavin at the address below.

Data retention and revocation

OAuth refresh tokens are stored on the authorising user's own machine and used only to renew access tokens. There is no central server storing user data.

You can revoke access to these OAuth applications at any time at myaccount.google.com/connections. Revocation invalidates any tokens that have been issued.

Contact

Privacy questions or requests: gavin@slaters.uk.com

See also our Terms of Service.