Updated November 14, 2026. This policy describes the intended configuration of ThinkCentre Plex Music, a private server for its owner. Setup is in progress.
The application requests the Google Drive read-only OAuth scope to list folders, read music file metadata and stream music files. That scope can read the owner's Drive; rclone's configured root folder limits this deployment to the selected Music folder. The application does not request permission to create, change or delete Drive files. The owner creates the folder separately through Google Drive.
Music originals remain in Google Drive. Requested audio may be cached on the owner's ThinkCentre. rclone is configured with a 2 GiB cache target and a one-hour maximum cache age. Open files and cleanup intervals can temporarily delay eviction or exceed that target. Plex stores library metadata and may store artwork and analysis results locally until the owner removes them.
OAuth credentials and refresh tokens are stored in restricted local configuration files, accessible to the owner and administrators. They are not included in this website or deliberately published in logs. The Mac mini provides an authenticated SSH path to the server; outbound traffic may pass through the owner's configured network proxy.
Google processes Drive and authorization requests. Plex and Plexamp may process account, playback, library metadata or discovery requests according to the owner's Plex settings and Plex's own policies. The owner does not sell Google user data or use it for advertising. This project is not offered to third-party users.
The owner can revoke access in Google Account's third-party connections settings, stop the rclone and Plex services, and remove local credentials, cache and Plex library data. Revoking access prevents future authorized Drive requests; it does not itself erase previously stored local data. This server does not delete music originals from Drive.
The operator is the personal Google account owner who creates and authorizes this OAuth client. There is no public registration or third-party support service. Only that owner should authorize this application.