Privacy policy for packages that access Google APIs - Tidyverse

These packages use internal resources owned by the “Tidyverse API Packages” project on Google Cloud Platform. That is the name you will see in a consent screen. Tidyverse Packages Blog Learn Help Contribute PrivacypolicyforpackagesthataccessGoogleAPIs ThetidyverseteammaintainsseveralpackagesthatmakeiteasiertoworkwithGoogleAPIsfromR: gargleprovidesgeneralRinfrastructureforGoogleAPIs,suchasauth bigrquerywrapsthe BigQueryAPI googledrivewrapsthe DriveAPI gmailrwrapsthe GmailAPI googlesheets4wrapsthe SheetsAPI Allofthesepackagesaregovernedbycommonpoliciesrecordedhere.Thesepackagesuseinternalresourcesownedbythe“TidyverseAPIPackages”projectonGoogleCloudPlatform.Thatisthenameyouwillseeinaconsentscreen.Exception:gmailrdoesNOTuseanyresourcesownedbyTidyverseAPIPackages,dueto specialrequirementsaroundGmailanditsscopes.YouMUSTprovideyourownOAuthclienttogmailr,whereasthatispossible,butnotmandatory,fortheotherpackageslistedhere. YouruseofGoogleAPIswiththesepackagesissubjecttoeachAPI’srespective termsofservice.Seehttps://developers.google.com/terms/. Privacy Googleaccountanduserdata Accessinguserdata ThesepackagesaccessGoogleresourcesfromyourlocalmachine.YourmachinecommunicatesdirectlywiththeGoogleAPIs. TheTidyverseAPIPackagesprojectneverreceivesyourdataorthepermissiontoaccessyourdata.Theownersoftheprojectcanonlyseeanonymous,aggregatedinformationaboutusageoftokensobtainedthroughitsOAuthclient,suchaswhichAPIsandendpointsarebeingused. Eachpackageincludesfunctionsthatyoucanexecuteinordertoreadormodifyyourowndata.Thiscanonlyhappenafteryouprovideatoken,whichrequiresthatyouauthenticateyourselfasaspecificGoogleuserandauthorizetheseactions. ThesepackagescanhelpyougetatokenbyguidingyouthroughtheOAuthflowinthebrowser.ThereyoumustconsenttoallowtheTidyverseAPIPackagestooperateonyourbehalf.TheOAuthconsentscreenwilldescribethescopeofwhatisbeingauthorized,e.g.,itwillnamethetargetAPI(s)andwhetheryouareauthorizing“readonly”or“readandwrite”access. TherearetwowaystousethesepackageswithoutauthorizingtheTidyverseAPIPackages:bringyourown serviceaccounttokenorconfigurethepackagetouseanOAuthclientofyourchoice. Scopes OverviewofthescopesrequestedbyvariousTidyverseAPIPackagesandtheirrationale: userinfo.email(readonly):AllOAuthtokensobtainedwiththeTidyverseAPIPackagesrequestthisscopesothatcachedtokenscanbelabelledwiththeassociatedGoogleuser,allowingyoutomoreeasilyaccessGoogleAPIswithmorethanoneidentity.TheTidyverseAPIPackagesdoNOThaveaccesstoanddoNOTstoreyourGooglepassword. BigQueryandGoogleCloudPlatform(read/write):Thebigrquerypackageletsyouupload,query,andmodifydatastoredinGoogleBigQuery,aswellasretrievemetadataaboutprojects,datasets,tables,andjobs. Drive(read/write):ThegoogledrivepackageallowsyoutomanageyourDrivefilesandthereforethedefaultscopesincluderead/writeaccess.Thegoogledrivepackagemakesitpossibleforyoutogetatokenwithmorelimitedscope,e.g.readonly. Gmail(read/write):ThegmailrpackageallowsyoutofullymanageyourGmailaccountandthereforethedefaultscopegrantsthatability.Thegmailrpackagemakesitpossibleforyoutogetatokenwithmorelimitedscope,e.g.readorcomposeonly. Sheets(read/write):Thegooglesheets4packageallowsyoutomanageyourspreadsheetsandthereforethedefaultscopesincluderead/writeaccess.Thegooglesheets4packagemakesitpossibleforyoutogetatokenwithmorelimitedscope,e.g.readonly. Sharinguserdata ThepackagesonlycommunicatewithGoogleAPIs.NouserdataissharedwiththeownersoftheTidyverseAPIPackages,RStudio,oranyotherservers. Storinguserdata Thesepackagesmaystoreyourcredentialsonyourlocalmachine,forlaterreusebyyou.Usecautionwhenusingthesepackagesonasharedmachine. Bydefault,anOAuthtokeniscachedinalocalfile,suchas~/.R/gargle/gargle-oauth.Seethedocumentationfor gargle::gargle_options()and gargle::credentials_user_oauth2()forinformationonhowtocontrolthelocationofthetokencacheorsuppresstokencaching,globallyorattheindividualtokenlevel. Policiesforauthorsofpackagesorotherapplications DonotuseanAPIkeyorclientIDfromtheTidyverseAPIPackagesinanexternalpackageortool.PertheGoogleUserDataPolicy https://developers.google.com/terms/api-services-user-data-policy,your applicationmustaccuratelyrepresentitselfwhenauthenticatingtoGoogleAPIservices. Ifyouusethesepackagesinsideanotherpackageorapplicationthatexecutesitsownlogic—asopposedtocodeintheTidyverseAPIPackagesorbytheuser—youmustcommunicatethisclearlytotheuser.DonotusecredentialsfromtheTidyverseAPIPackages;instead,usecredentialsassociatedwithyourprojectoryouruser. Contents Googleaccountanduserdata Thetidyverseisproudlysupportedby