Privacy Policy

Introduction

BigQuery Studio ("the App") is a native macOS desktop application developed by Diego Valladares. This Privacy Policy describes what information the App accesses, how it is used, and how it is stored.

BigQuery Studio is designed with privacy as a core principle: all data stays on your device. The App does not operate any servers, does not collect analytics, and does not transmit your data to any third party.

Information We Access

Google Account Information

When you sign in with Google (OAuth 2.0), the App requests the following permissions (scopes):

• Email address (userinfo.email) — Used solely to display which Google account is currently signed in within the App's interface.
• BigQuery access (bigquery) — Used to execute SQL queries, list datasets, browse table schemas, and manage query jobs. This is the core functionality of the App.
• Cloud Platform read-only (cloud-platform.read-only) — Used exclusively to list your Google Cloud projects so you can select which project to work with. No other Cloud Platform resources are accessed.

Service Account Credentials

When you authenticate using a Service Account JSON key file, the App reads the key file you provide and uses it to authenticate API calls to Google BigQuery. The key file contents are stored locally on your device.

Query Data

SQL queries you write and their results are processed locally within the App. Query execution occurs directly between your Mac and the Google BigQuery API — no intermediate servers are involved.

How Information Is Stored

OAuth Tokens

Access tokens and refresh tokens obtained during Google sign-in are stored in the macOS Keychain, which provides hardware-level encryption. Tokens are never written to plain text files or transmitted to any external service.

Local Application Data

The App stores the following data locally in ~/Library/Application Support/BigQuery Studio/:

• Connection configurations (name, project ID, authentication type)
• Saved SQL scripts and folder structure
• Favorites (bookmarked datasets, tables, and views)
• Query history (SQL text, execution time, row counts)
• Sidebar cache (dataset and table names for faster loading)
• Application settings and preferences

All of this data resides exclusively on your Mac. None of it is uploaded, synced, or shared with any server.

How Information Is Used

• Your email address is displayed in the connection panel so you can identify which account is authenticated.
• Your OAuth tokens are used to authenticate API calls to Google BigQuery and Google Cloud Resource Manager.
• Your query history is stored locally to let you review, search, and re-run past queries.
• Your Service Account key (if used) is stored locally to authenticate API calls without requiring interactive sign-in.

Data We Do NOT Collect

• We do not collect, transmit, or store any data on external servers.
• We do not use analytics, crash reporting, or telemetry services.
• We do not use cookies or tracking technologies.
• We do not share, sell, or license any user data to third parties.
• We do not use your data for advertising, profiling, or marketing purposes.

Third-Party Services

The App communicates directly with the following Google APIs:

• Google OAuth 2.0 — For user authentication
• Google BigQuery API — For query execution, dataset browsing, and metadata retrieval
• Google Cloud Resource Manager API — For listing available projects
• Google Dataplex API — For data quality scan results (optional feature)

These API calls are made directly from your device. No data passes through any intermediary server operated by us.

Google's own privacy practices are governed by the Google Privacy Policy.

Data Retention and Deletion

• Sign out — Signing out of a connection deletes the OAuth tokens from the macOS Keychain and revokes them with Google.
• Delete connection — Removing a connection deletes all associated credentials and cached data.
• Uninstall — Deleting the App removes the application binary. Local data in ~/Library/Application Support/BigQuery Studio/ can be manually deleted.
• Revoke access — You can revoke the App's access to your Google account at any time from Google Account — Third-party apps.

Children's Privacy

BigQuery Studio is not intended for use by children under the age of 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy, please contact:

• Developer: Diego Valladares
• Website: valladares.org
• Email: Contact available at valladares.org/contact