Privacy policy
Last updated 5 November 2026
This policy covers the tools on kkristjans.is and its subdomains, including Third Shift (3shift.kkristjans.is). The tools are run privately by Kristmann Ingi Kristjánsson for himself and his family. They are not offered to the public: only people the owner has invited can sign in.
Signing in
Sign-in is handled by Cloudflare Access using your Google account (or a one-time code sent to your email). We receive your email address to check that you are on the list of invited people. Cloudflare's own processing is described in Cloudflare's privacy policy.
Google user data in Third Shift
If you choose to connect a Google account in Third Shift, it asks for these permissions:
- Google Calendar: to read the calendars you choose and show their events in the family schedule, and to add events you create in Third Shift to calendars you pick.
- Gmail (read-only): to find emails that match searches you set up (for example, emails from your child's school) and show their subject, sender, date and text on the day they arrived. Third Shift never sends, changes or deletes email.
- Google Sheets (read-only): to import a school-year calendar from a spreadsheet you link.
- Your Google account's email address, to tell connected accounts apart.
This data is used only to show it to you and your family inside Third Shift. It is not sold, not used for advertising, not used to train AI models, and not shared with anyone, except as needed to run the service (the hosting provider below). People never read it, other than you and the family members you share Third Shift with.
Third Shift's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Other services
Third Shift can also connect to AnyList (shared grocery list) and Krónan (grocery orders), using the family's own accounts. Recipe pages you add, and grocery item names, may be sent to Anthropic's Claude API to read ingredients and match products; email and calendar data is not.
Where data is stored
Data is stored on a server on Google Cloud in the United States. Access tokens for connected accounts are stored encrypted. Daily backups are kept for 14 days.
Removing your data
You can disconnect a Google account at any time from Third Shift's Sync page, which revokes its access and deletes the calendar events and emails copied from it. You can also revoke access at myaccount.google.com/permissions. To have all your data deleted, contact us at the address below.
Contact
Kristmann Ingi Kristjánsson · [email protected]