GutenDisplay Privacy Policy
Last updated: November 2, 2026
Printcent Van Gogh LLC, doing business as Gutenberg Armory provides GutenDisplay. In this policy, “we” means Gutenberg Armory. Contact us at printcentvangogh@gutenbergarmory.com.
This policy covers the GutenDisplay application and its Google authorization service. It also explains information you send us for GutenDisplay support. Shopping and other activities elsewhere on the Gutenberg Armory website may be covered by separate website or commerce notices.
Information used by GutenDisplay
Calendar information. When you add a calendar, GutenDisplay reads information needed to display it. This can include calendar names and identifiers; event titles, dates, times, recurrence information, descriptions, notes, locations and status; organizer and attendee names and email addresses; RSVP or participation states; and event, meeting and attachment links. Some calendars do not provide all these fields. The app displays attachment references but does not download attachment contents.
Calendar sources and local preferences. The app stores calendars you add, private subscription URLs where applicable, cached event data, successful-refresh times, and display preferences. Private calendar URLs can grant access to a calendar and are treated as credentials.
Authorization and security information. If you connect Google, the authorization service processes Google's authorization responses, access and refresh credentials, the list of readable calendars for the calendar picker, your selection, temporary pairing codes, session identifiers, and an essential session cookie. Calendar identifiers can contain email addresses. Google receives your sign-in directly; we do not receive your Google password.
The authorization service and its hosting provider process network and request information necessary to operate and secure the service, such as IP addresses, browser/client information and request timing. The application uses short-lived, keyed identifiers derived from IP addresses for rate limiting rather than storing raw IP addresses in its application records.
Support information. If you contact us, we receive your email address, correspondence, and any information you choose to include. Please do not send passwords, tokens, private calendar URLs, or unredacted calendar screenshots.
Why we use this information
We use this information to link calendars you authorize, let you select sources, display and refresh events, provide offline cached display, remember preferences, prevent abuse, troubleshoot problems you report, and respond to privacy requests. Where applicable, this processing relies on your authorization or consent, the service you request, and legitimate interests in security and support as permitted by law.
Google permission is read-only and can cover calendars your account can access. Our linking service reads the calendar list for selection; the TV downloads event data from the calendars you add. GutenDisplay does not modify your Google events, send invitations, or submit RSVP changes.
Where information is processed and stored
On your TV: saved calendar data, source URLs and authorization material are stored in an encrypted app-private vault using a device-held key. Non-sensitive display preferences are stored locally. Decrypted details exist in memory while the app displays them. Calendar details are visible to people who can see the TV; encryption does not hide an open screen.
For Google linking and renewal: the TV downloads event bodies directly from Google. The Cloudflare-hosted authorization service handles tokens and temporary calendar-picker metadata, but does not download or maintain a hosted database of event bodies. A Google refresh credential is encrypted into a device-bound authorization package stored on the TV. The service decrypts that package when needed to obtain a fresh access token. This service-side processing is not end-to-end encryption against the service operator.
For subscriptions and files: the TV connects directly to the feed provider when adding or refreshing an online subscription. The provider receives the network requests needed to serve the feed. Imported files are copied into the local calendar cache. Original files and any pairing/export files you keep on USB drives, phones or computers remain outside the app's deletion controls.
Development builds also offer an optional one-time desktop linking tool. If you use it, authorization information is processed on your computer and transferred in a TV-encrypted response file. Files you retain there are under your control. This tool is not required for phone-browser linking.
Retention and deletion
Saved sources and cached events remain on the TV until replaced by a successful update, removed in GutenDisplay, or erased using the device's app-data controls. A failed refresh can leave an older cache visible. Revoking Google access stops future authorized access but does not erase an existing TV cache by itself.
Linking sessions expire after 15 minutes. Temporary grant/delivery records are cleared after successful acknowledgement or cancellation, or expire and are removed by the service. Short-lived security counters expire according to their rate-limit windows, generally no more than an hour. The encrypted authorization package has a 180-day validity limit, although Google can end access sooner. An expired package may remain in local storage until its source is removed or relinked.
Deletion from active service storage does not guarantee immediate removal from infrastructure recovery copies. Cloudflare's storage recovery and other provider retention rules can preserve copies for their applicable retention periods. We do not promise that all backup copies disappear when a linking session expires.
We retain support correspondence as needed to resolve requests, manage relevant follow-up and meet applicable legal or security obligations. You can request deletion of correspondence we control. Provider backups and legally required records may have separate retention periods.
See Delete Data or Disconnect for removal, Google revocation and web/email request options, including when you cannot access the TV.
Service providers and sharing
We use Google for calendar access and authorization, Cloudflare for the authorization service, and Squarespace to host our public website. Support email is handled through our email service provider. These providers process information needed for their services and may process it in countries other than yours, under their applicable terms and privacy practices.
We do not sell or rent calendar data, use it for advertising or profiling, or use it to train AI or machine-learning models. The app and authorization pages do not include advertising or behavioral-analytics SDKs. Hosting, security and website systems can still process technical request data. Squarespace website cookies and optional website features are separate from the essential linking cookie; use the site's available cookie controls and applicable website notices.
We do not routinely inspect calendar contents. Human access to Google user data is limited to specific user-authorized support, necessary security or abuse investigations, legal requirements, or other access expressly allowed by Google's policies. We may disclose information when legally required or necessary to protect users and the service, consistent with those policies and applicable law. Information is not transferred for unrelated marketing.
Google Limited Use
GutenDisplay follows the Google API Services User Data Policy, including its Limited Use requirements, and the applicable Google Workspace user data policy. Google data is used for the calendar features you authorize and the limited support, security and legal purposes described here.
Your choices and rights
You choose which calendars to add. You can remove a source, clear app data, stop using the app, or revoke Google's access permission. These actions have different effects, explained on the deletion page; none deletes your original Google calendar or Google Account.
Depending on your location, you may have rights to access, correct, delete, obtain a copy of, or limit certain processing of personal information, withdraw consent, or complain to a privacy regulator. Send requests to our contact address. We may need proportionate information to verify a request, but will not ask for your Google password or authorization tokens. We respond under applicable legal requirements. We cannot remotely erase a TV's local cache.
GutenDisplay is a general-purpose calendar display, not a service designed for children to independently link accounts. Calendars adults choose to display may contain family information. Contact us if you have a concern about a child's information.
Security and changes
We use encrypted local storage, HTTPS for supported online sources and authorization, bounded requests and short-lived pairing sessions. No system can guarantee absolute security. Before transferring a TV, remove your sources and use appropriate device data-erasure controls.
We update this policy when our practices change and revise the date above. Material new uses of Google data require the notices and consent required by Google's policies before those uses begin.