GlassTab — Privacy Policy

Overview

GlassTab ("the Extension") is a browser extension for Chrome, Edge and Brave that replaces your new tab page with a personal dashboard: the time, weather, your calendar, shortcuts, a focus timer and a to-do list. This Privacy Policy describes how the Extension accesses, uses, stores, shares, and protects user data, including data obtained through Google APIs.

GlassTab has no account, no developer-run server, and no analytics or advertising. Everything it stores stays on your own device.

GlassTab's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

1. Data Accessed

Google User Data

If you choose to connect your Google account, GlassTab requests read-only access to Google Calendar using the calendar.readonly scope. From the events on your primary calendar, GlassTab uses only:

Event titles
Event start and end dates and times, and whether an event is all-day
The event's video-meeting link, if it has one (for example a Google Meet or Zoom link), so it can show a "Join" button

Google's API returns each event as a whole. To find a meeting link, GlassTab looks at the event's conference details, location and description. Everything other than the items listed above is discarded immediately and never stored. GlassTab does not access Gmail, Google Drive, Google Contacts, or any other Google service, and it cannot create, change, or delete events.

Calendar Links (Optional)

Instead of connecting Google, you can paste a private calendar link (an iCal/ICS address) from Google Calendar, Outlook or iCloud. GlassTab downloads that calendar directly from the provider and uses the same event details listed above. The first time you add a link from a provider, your browser asks you to allow GlassTab to access that provider's calendar address, and GlassTab can access nothing else on it.

Weather and Location

Weather: GlassTab sends your chosen city's coordinates to the Open-Meteo weather service to get the current weather and a 5-day forecast.
City search: when you search for a city, the text you type is sent to Open-Meteo's geocoding service to find matching places.
"Use my approximate location" (optional): only if you click this button, GlassTab asks the GeoJS service for your approximate city. Like any website you visit, GeoJS sees your IP address in order to answer. GlassTab saves only the resulting city name and coordinates on your device. GlassTab never uses your browser's precise (GPS) location.

Stored on Your Device

Settings (theme, background, toggles, clock and temperature format, focus and break lengths)
Your shortcuts and to-do list
Weather city and coordinates
A background photo, if you choose to upload one
Your calendar link, if you add one
A cache of recent calendar events (see section 4)
Short-lived caches of the weather and the daily quote, and the state of a running focus timer

2. Data Usage

GlassTab uses the data it accesses only to provide its features:

Calendar data is used only to show your upcoming events, a "next meeting" reminder with a Join button, and a monthly calendar on your new tab.
Weather and location are used only to show the weather for your chosen city.
Settings, shortcuts and to-dos are used only to build your dashboard.

GlassTab does not use any data for advertising, analytics, profiling, market research, creditworthiness, or any purpose unrelated to these features.

GlassTab does not use Google user data, or any other user data, to develop, improve, or train artificial intelligence or machine learning models.

3. Data Sharing

GlassTab does not share, sell, rent, or transfer any user data, including Google user data, to anyone. There is no developer server, so nothing is ever sent to the developer.

The only network requests GlassTab makes come directly from your browser to these services:

Google Calendar API and Google sign-in (only if you connect Google)
Your calendar provider (only if you add a calendar link)
Open-Meteo (weather and city search)
GeoJS (only when you click "Use my approximate location")
Google Sheets (daily quote) and Google's favicon service (website icons)

SidePin: if you also use SidePin (a separate extension by the same developer) and right-click a shortcut and choose "Pin to SidePin", GlassTab sends that one site's address and name to SidePin on your device so it can be added as a pin. Nothing else is shared.

4. Data Storage & Protection

All data is stored locally on your device using the browser's extension storage. Nothing is stored on external servers or in cloud databases.

Calendar Event Cache

So that your events appear instantly on every new tab, and stay visible if the network is slow, GlassTab keeps a copy of your most recently fetched events (titles, times, all-day flag and meeting link only) in the extension's local storage on your device. The copy is replaced each time the calendar refreshes and is deleted when you disconnect Google or uninstall the Extension.

Sign-in Tokens

Chrome: sign-in is handled by Chrome's built-in identity system. GlassTab does not store your token itself.
Edge, Brave and other browsers: the short-lived access token (valid for about one hour) is kept in session storage, which is held in memory and cleared when the browser closes. GlassTab renews it with Google in the background while you remain connected.

Security Measures

All communication with Google and other services uses HTTPS.
Access tokens are only ever sent to Google.
All of GlassTab's code ships inside the extension package. No remote code is loaded, and a strict Content Security Policy prevents script injection.
No user data is logged or transmitted to the developer.

5. Data Retention & Deletion

Retention

Calendar event cache: kept until the next refresh replaces it, or until you disconnect or uninstall.
Access tokens: about one hour, or until you disconnect or close the browser.
Settings, shortcuts, to-dos and photo: kept until you change them, reset them, or uninstall the Extension.

Deletion

Disconnect Google: click "Disconnect" in Settings. This revokes GlassTab's access with Google and deletes the stored token and cached events.
Remove a calendar link: click "Remove" next to it in Settings.
Reset shortcuts: click "Reset" in Settings to clear all saved shortcuts. To-dos can be removed individually or with "Clear done".
Uninstall: uninstalling the Extension removes all of its stored data.
Revoke from your Google account: you can also remove GlassTab's access at any time at myaccount.google.com/permissions.

Since no data is stored on external servers, there is no server-side data to request deletion of.

Google API Services Limited Use Disclosure

GlassTab's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Donations

Donations are optional and handled entirely by PayPal under its own privacy policy. GlassTab does not receive or store your payment details.

Cookies & Tracking

GlassTab does not use cookies, analytics, tracking pixels, or any form of user tracking or monitoring.

Children's Privacy

The Extension is not directed at children under the age of 13 and does not knowingly collect data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated revision date. Continued use of the Extension after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or wish to request data deletion, please contact us at cinemamorsels@gmail.com.