Privacy Policy

Who operates Harbor

Harbor is operated by Caleb Brake, an individual acting as a sole proprietor, not by a company. Caleb Brake is the data controller for any data Harbor processes. Contact: calebtbrake@gmail.com.

Current state of the service

Harbor is a single-user tool. The only account on the system belongs to its developer, Caleb Brake, who uses it to publish and schedule his own content to his own social media, video, and podcast accounts. Harbor does not currently offer public signups, and it does not collect, process, or store personal data belonging to any third party. If that changes, this policy will be updated before public accounts are opened.

What data Harbor processes

• Content: video files, images, post text, titles, descriptions, and scheduling metadata that the operator uploads or drafts for publishing.
• OAuth credentials: access and refresh tokens issued by each connected platform, used to publish content to the operator's own accounts on that platform.
• Account identifiers: the operator's own login/email used to authenticate to Harbor itself.

Harbor does not collect data about visitors to the connected accounts, followers, viewers, or anyone Harbor's content is published to.

How data is stored

OAuth tokens are stored encrypted at rest, either as encrypted GitHub repository secrets or in SOPS-encrypted files in a private repository. Uploaded content is stored in private cloud storage. Nothing described here is publicly accessible.

Retention and deletion

Content and tokens are retained for as long as the operator continues to use Harbor for the associated platform account. To request deletion of any data Harbor holds, or to revoke a platform connection, contact calebtbrake@gmail.com. A platform's OAuth token can also be revoked directly from that platform's own account settings at any time, which immediately cuts off Harbor's access.

Third-party services

Harbor connects to the following platforms' APIs, solely to publish or schedule the operator's own content to the operator's own accounts on each platform: YouTube (Google), X, LinkedIn, Meta (Instagram, Facebook, Threads), TikTok, Bluesky, Rumble, and Spotify. Each platform's use of data is governed by that platform's own privacy policy and terms.

YouTube / Google: Harbor's use of information received from the YouTube API is subject to the YouTube API Services Terms of Service. For information on Google's data practices, see the Google Privacy Policy.

No sale of data, no ad tracking

Harbor does not sell, rent, or share data with third parties for advertising or marketing purposes. Harbor does not run any analytics, tracking pixel, or advertising script. The only logs collected are standard hosting/server logs (request URLs, timestamps, IP addresses) kept for operating and securing the service.

Changes to this policy

This policy will be updated if Harbor's data practices change, including before it is opened to any user beyond its developer. Questions can be sent to calebtbrake@gmail.com.