Open Source Bhaiya

Terms of Service

Last updated: July 2026

Welcome to OpenSourceBhaiya. These Terms of Service govern your access to this website and any open-source software, projects, or resources published through it. By accessing this website or downloading any software made available here, you agree to these terms.

OpenSourceBhaiya exists to share technology openly, encourage learning, and build useful software with transparency, privacy, and long-term maintainability at its core.

1. Purpose

OpenSourceBhaiya is a personal portfolio and an open-source project hub where software, experiments, tools, and technical resources are shared with the community.

The purpose of this website is to showcase projects, distribute open-source applications, document technical work, and provide educational resources. Nothing published here should be interpreted as professional security, legal, financial, or technical advice unless explicitly stated.

Using this website does not create any professional, commercial, or contractual relationship between you and the maintainer.

2. Open Source Software

Every application distributed through OpenSourceBhaiya is open-source and released under its respective license. The applicable license can always be found within the corresponding GitHub repository.

All software is provided "as is", without warranties of any kind, whether express or implied. This includes, but is not limited to, warranties of merchantability, fitness for a particular purpose, reliability, or non-infringement.

Before using any application, you are encouraged to review the publicly available source code, understand its functionality, and evaluate whether it meets your own security and operational requirements.

Unless otherwise stated, you are free to inspect, modify, fork, and contribute to the projects according to their individual licenses.

3. Limitation of Liability

While every project is developed with care and thoroughly tested before release, no software can guarantee complete freedom from bugs or unexpected behavior.

The maintainer shall not be held responsible for any direct, indirect, incidental, consequential, or special damages arising from the installation, modification, execution, or misuse of any software distributed through this website.

By downloading or using any application, you acknowledge that you do so entirely at your own discretion and risk.

4. Privacy

Privacy is treated as a fundamental design principle rather than an afterthought.

This website does not use invasive third-party tracking systems or advertising technologies to monitor visitors. Any information voluntarily shared through email or contact forms will only be used for direct communication and will never be sold, rented, or shared with third parties without consent unless required by law.

Many of the applications published here follow a Local-First philosophy, meaning sensitive information is processed directly on your own device whenever possible. Unless a feature explicitly requires communication with an external service, applications are designed to avoid unnecessary data collection, telemetry, or background tracking.

5. Third-Party Services

Some applications may integrate with trusted third-party platforms such as GitHub, Google, or other officially supported services when their functionality requires it.

Any integration with third-party services is handled through their official APIs, with appropriate user authorization, and in accordance with each platform's privacy policy and terms of service.

This website may contain links to external websites. Those sites have their own terms of service and privacy policies which you should review independently.

6. Security

Security is considered throughout the development process rather than being treated as a final step.

If you discover a security vulnerability in any project published through OpenSourceBhaiya, responsible disclosure is strongly encouraged. Please avoid publicly disclosing vulnerabilities before they can be reviewed and addressed.

Responsible security research helps improve software for everyone.

7. Changes to These Terms

These Terms of Service may be updated periodically to reflect improvements, legal requirements, or changes to the projects available through this website.

The latest revision date will always appear at the top of this page. Continued use of this website after updates constitutes acceptance of the revised Terms.

8. Contact

Questions regarding these Terms, security reports, collaboration opportunities, or general feedback are always welcome.

Whether you've discovered a bug, identified a security issue, have suggestions for improvement, or simply want to discuss technology, feel free to get in touch through the available contact channels.

Open source grows through collaboration, and every thoughtful contribution helps improve the projects shared here.

9. MailSync & Gmail API Usage (Google OAuth)

MailSync is a local-first utility designed to securely transfer One-Time Passwords (OTPs) from your Android device to your computer. To function reliably as a backup sync engine, MailSync requests access to your Gmail account using the highly restricted https://www.googleapis.com/auth/gmail.readonly scope. MailSync's use and transfer to any other app of information received from Google APIs will adhere strictly to the Google API Services User Data Policy, including the Limited Use requirements.

What Google User Data is Accessed & How We Use It

MailSync exclusively accesses your incoming email headers (Sender and Subject) and email body text. This access is strictly used on your local device to monitor and extract Verification Codes, OTPs, and Security Alerts so they can be beamed to your paired PC. MailSync uses the api.gmail endpoint with an optimized server-side filter so it only ever scans recent messages. We do not use your data for advertising, analytics, profiling, or any other secondary purpose.

Data Protection Mechanisms for Sensitive Data

All email scanning and OTP extraction happens entirely locally on your Android device. Once an OTP is detected, it is immediately encrypted using military-grade End-to-End Encryption (AES-256-GCM) before it ever leaves your phone. The encrypted payload is transmitted via a temporary Firebase Realtime Database relay to your paired PC Chrome Extension, which holds the sole decryption key. We have absolutely no ability to decrypt, read, or intercept your OTPs or emails.

Data Retention and Deletion

MailSync operates on a strict Zero-Knowledge architecture and does not store your emails on any server. Locally: Extracted OTPs are kept in a temporary device cache and automatically purged. On our Relay Server: The AES-encrypted OTP payloads are automatically deleted from our Firebase relay database within 5 seconds of transmission. We do not retain, store, or archive any Google user data. If you unlink your account or uninstall the app, all local cryptographic keys and Google access tokens are instantly and permanently destroyed.