Personal Backup Utility

MPLS Backup

A private, owner-operated system that creates AES-256-encrypted snapshots of a local database and stores them securely on Google Drive.

Overview

MPLS Backup is a personal, single-owner utility that automates encrypted cloud backup of a local SQLite database. It is designed for the sole use of the owner and operator — no external users, accounts, or data-sharing are involved.

The application uses Google Drive as its cloud storage layer. All data is encrypted locally on the owner's machine before upload. Google Drive receives only ciphertext; no plaintext content or readable filenames are ever stored on Google's servers.

Development status: This application is currently in active development. Google Drive cloud storage integration has been configured but has not yet been activated for automated use. No backup data has been uploaded to Google Drive.

How It Works

  1. Local snapshot. The backup process creates a timestamped copy of the local SQLite database using SQLite's built-in online backup API, which is safe to run while the database is in use.
  2. Encryption. Each snapshot is encrypted on the owner's machine using AES-256-CTR before it leaves local storage. Both file content and filenames are encrypted. Encryption is performed by rclone's crypt layer; the encryption keys are stored locally and never leave the owner's machine.
  3. Cloud upload. The encrypted file is uploaded to a dedicated folder in the owner's personal Google Drive using the Google Drive API. Only the owner can decrypt the stored files.
  4. Retention management. Old backups are retained according to a tiered rolling schedule. Files outside the retention window are deleted only upon explicit owner action.

Google Drive Access

This application requests Google Drive access to create and manage encrypted backup files in a designated private folder. The OAuth scope used (drive) permits access to files in the owner's Google Drive account. The application is designed and used exclusively to manage backup files in the designated folder and does not access, modify, or retrieve any other content in Google Drive.

  • Access is authorized only by the owner of this application.
  • No Google Drive data is shared with any third party.
  • Access can be revoked at any time from Google Account Permissions.
  • This application does not access Google account profile information, email, contacts, or any files outside the designated backup folder.

Security

  • Encryption standard: AES-256-CTR (rclone crypt layer)
  • Content encryption: All backup file contents are encrypted before upload — Google Drive stores only ciphertext.
  • Filename encryption: Enabled (Standard mode) — filenames on Google Drive are unreadable encrypted strings.
  • Directory name encryption: Enabled — folder structure is also encrypted.
  • Key storage: Encryption keys are stored locally on the owner's machine in a restricted-access configuration file. Keys are never transmitted to Google Drive, to any remote server, or to any third party.
  • OAuth credentials: Stored locally in a restricted-access configuration file on the owner's machine.

Development Status

This application is being developed and tested for personal use. The following components reflect their current activation state.

Operational

  • Local database backup creation (SQLite online backup API)
  • Local backup retention management
  • Encryption layer configured (rclone crypt with AES-256)

Planned — Not Yet Activated

  • Automated cloud upload to Google Drive (scheduled task pending owner approval)
  • Cloud backup retention management (script prepared, not yet enabled)
  • Automated backup health monitoring and alerts

Contact

This is a personal, single-owner application. For questions about data handling or this website:

Email: mpls.team001@gmail.com

See also the Privacy Policy for full data handling details.