Do you store my Google password?

No. WipeAway never sees, receives, or stores your Google password under any circumstances.

How sign-in actually works

WipeAway uses Google's official OAuth 2.0 authentication system — the same standard used by millions of apps that integrate with Google services.

Here is exactly what happens when you sign in:

1. WipeAway redirects your browser to Google's own sign-in page (you can see the google.com URL in your browser)
2. You enter your email and password on Google's page — not on WipeAway
3. Google verifies your credentials on its own servers
4. If successful, Google sends WipeAway a limited-access token — a temporary key that allows specific, pre-approved actions on your behalf
5. WipeAway stores this token in a short-lived, secure session cookie on your browser (it expires after 24 hours)

At no point in this process does WipeAway receive, handle, or store your password. Google keeps your password entirely to itself.

What the access token allows

The token Google provides to WipeAway only grants permission for the two scopes you approved: calendar access and reading your email address. It cannot be used to access Gmail, Drive, or any other Google service. It also cannot be used to change your Google account password or security settings.