Privacy Policy for the Dropbox and Google Drive Connection
This policy describes which data the RAWCaptureBooth software processes when you connect a Dropbox or a Google Drive account. Our general privacy policy applies in addition and covers the use of this website.
Controller
Thomas Michael Müller, Fichtenstrasse 10c, 85659 Forstern, Germany, phone +49 1701890088, hello@rawcapturebooth.app
Principle: your data does not pass through our servers
RAWCaptureBooth is software that runs entirely on your own computer. When you connect a Dropbox or Google Drive account, only your computer communicates directly with the respective provider. We do not operate any server acting as an intermediary for this feature. Neither your credentials nor your images, file names, folder names or account information are transmitted to us, stored by us or accessible to us.
Data processed during sign-in
Signing in uses the provider's official authorisation flow (OAuth 2.0). Your password is entered only at the provider's own website; RAWCaptureBooth never sees it. After a successful sign-in the software receives access credentials from the provider (an access token and a refresh token). In addition, the software retrieves the display name and the e-mail address of the connected account once, so that the admin area can show which account is connected.
This information is stored exclusively on your local computer, in the configuration file
cloud.json inside %LOCALAPPDATA%\RAWCaptureBooth\config. The file resides in the
profile of the signed-in Windows account and is protected by the operating system's access rights. It holds
the access credentials in plain text, so anyone with access to that user profile can read them. Please
protect the computer accordingly.
Permissions requested and why
Dropbox
- account_info.read – display name and e-mail address of the connected account, so the software can show which account is in use.
- files.metadata.read – listing folders so you can pick a destination folder in the admin area.
- files.content.write – uploading the captured images and animations into the folder you selected.
- sharing.write and sharing.read – creating and reusing shared links so guests can open their picture or the web gallery via a QR code.
The software does not read file contents from your Dropbox. It only accesses the folders you selected as a destination and the files it placed there itself.
Google Drive
- https://www.googleapis.com/auth/drive.file – creating and writing only those files and folders that RAWCaptureBooth created itself or that you explicitly granted access to through the folder chooser (Google Picker).
- openid and email – showing which Google account is connected.
We deliberately request the drive.file scope only. RAWCaptureBooth can neither see, search,
list, modify nor delete the remaining contents of your Google Drive.
Content that is uploaded
The software uploads the resulting images created during an event and – if you enable those options – animations and the individual raw captures of a session. Files are placed in the folder you configured in the admin area, optionally in subfolders named after the event key you assigned. No further data such as usage statistics, device information or log files is transferred to your cloud account.
Event photographs regularly show identifiable people. For those images you, as the operator of the photo booth, are the controller under data protection law, not us. Please inform your guests about the capture and the upload and obtain any consent required. RAWCaptureBooth provides consent and privacy features, but using them is your responsibility.
Shared links and QR codes
If you use the QR code features, the software creates shared links at the respective provider, pointing at individual images or at the event folder. Anyone who knows such a link can open the linked content without signing in. Whether and for how long such links remain valid depends on the settings and plan of your cloud account; Google Drive does not offer an expiry date for folder shares. Please treat these links like access to the images themselves.
Limited Use of data received from Google APIs
RAWCaptureBooth's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, the data is used solely to provide the features you requested, is not transferred to third parties, is not used for advertising, and is not read by humans – except with your explicit consent, for security purposes, to comply with applicable law, or in aggregated and anonymised form.
Legal basis and retention
The processing of access credentials and account information is based on Art. 6(1)(b) GDPR, as it is necessary to provide the feature you requested. The information stays on your computer until you disconnect, reset the configuration or uninstall the software. We do not store any of it, so there is nothing for us to erase.
Disconnecting at any time
The admin area of the software offers a "Disconnect" button under "Cloud, Mail & QR". It deletes the stored access credentials and revokes the access at the provider. Independently of that, you can withdraw access directly at the provider at any time:
- Dropbox: Connected apps
- Google: Apps with account access
Files already uploaded remain in your cloud account after disconnecting and can be deleted by you there.
Privacy policies of the providers
Your rights
Subject to the statutory requirements you have the rights set out in Art. 15 to 21 GDPR. Details and the competent supervisory authority can be found in our general privacy policy.
Last updated: 5 August 2026