Sync Simple TODO List is a Firefox extension that keeps a TODO list and, if
you choose to connect Google Drive, syncs it between your own devices using
your own Google account.

SUMMARY: THERE IS NO BACKEND. The developer operates no server, receives no
data, and has no way to see your list. The extension runs entirely in your
browser and communicates only with Google's own APIs, using your own Google
account.

WHAT THE EXTENSION STORES, AND WHERE

On your device, in the browser's extension storage:
- Your TODO items: the text of each task, whether it is completed, and their
order.
- Your preferences: theme choice and whether auto-sync is on.
- If you connect Google Drive: an OAuth access token and refresh token, used
to call the Drive API on your behalf, plus two bookkeeping values (the id of
the synced file and the timestamp of the last sync) used to avoid redundant
downloads.

In your Google Drive, only if you connect it:
- A single JSON file (todo.json) containing your TODO items, stored in
appDataFolder, a hidden per-application folder in your own Drive account. It
does not appear in your normal Drive interface and is not visible to other
applications.

WHAT THE EXTENSION ACCESSES

The extension requests exactly one Google permission: the drive.appdata scope.
This is the narrowest Drive scope Google offers. It grants access only to the
hidden application folder described above, which the extension creates for
itself.

It cannot read, list, modify, or delete any other file in your Google Drive.
It has no access to your other Google data: no Gmail, no Contacts, no
Calendar, no profile information beyond what is needed to complete the
sign-in.

The extension also has permission to contact googleapis.com and
oauth2.googleapis.com, which is what makes those Drive and sign-in calls
possible. It does not access any web page you visit; it has no content scripts
and cannot read the pages you browse.

WHAT THE EXTENSION DOES NOT DO

• No developer backend. Nothing is sent to any server operated by the
  developer, because there is no such server. Network requests go only to
  Google's own endpoints.
• No analytics, telemetry, tracking, or advertising, of any kind.
• No data sharing. Your information is never sold, shared, or transferred to
  any third party.
• No accounts. There is nothing to register for and no profile is created.
• No data used for training, or any purpose beyond providing the sync feature
  itself.

YOUR CONTROL OVER YOUR DATA

• Sign in is optional. The extension works fully offline as a local list.
  Google Drive is only contacted after you explicitly click to connect and
  complete Google's consent screen.
• Disconnecting (from the popup or the extension's options page) deletes the
  stored tokens from your device and asks Google to revoke them. Your TODO
  items remain on your device.
• Revoking access at https://myaccount.google.com/permissions has the same
  effect from Google's side, and also deletes the hidden application folder
  Google stores for this extension.
• Uninstalling the extension removes all data it stored on your device. To
  also remove the synced copy, revoke access as described above.

CHILDREN

This extension is not directed at children and collects no personal
information from anyone.

CHANGES TO THIS POLICY

Any change will be published at
https://sync-simple-todo.matiaswdeveloper.workers.dev/privacy with the date at
the top updated.

CONTACT

Questions about this policy or the extension can be sent to
matiaswdeveloper@gmail.com