River Stone Diamonds Backup

River Stone Diamonds uses a locally run backup utility to protect its website project, operational files, and hosting account. The utility stores encrypted backup repository files in the authorized operator's Google Drive account.

Google Drive access

The utility requests Google's drive.file permission. This lets it create and manage the files it makes for the backup repository; it does not request access to unrelated files in the Drive account. Google Drive is used to store the encrypted repository files.

Encryption and backup contents

Restic encrypts backup contents on the local computer before upload. A backup may include website and project files, Codex conversation and session history, cPanel account files, recovery settings, and an SSH private key. Those files may contain business or personal information. The encrypted repository is stored in Google Drive; the backup utility does not send these backup files to the public website.

The Restic password is held separately from the cloud repository and is required to restore the encrypted contents. Google OAuth credentials are kept in a locally encrypted configuration file.

Retention and access controls

The routine retention schedule keeps up to 14 daily, 8 weekly, and 12 monthly snapshots. The account holder can revoke the utility's Google access from their Google Account and can manage the repository files in Drive.

Privacy

For more information about data handling, read the River Stone Diamonds Privacy Policy. Questions may be sent to concierge@riverstonediamonds.com.