NotesSync is a Chrome extension for taking personal notes. This policy explains exactly what it stores, what it transmits, and who can see it.
What NotesSync stores
Everything below is stored locally on your device using Chrome's extension storage:
| Data | Where | Why |
|---|---|---|
| Your notes (subject, details, tag, colour, timestamps) | chrome.storage.local |
so the extension works offline and loads instantly |
| Theme preference (system / light / dark) | chrome.storage.local |
display setting; deliberately never synced |
| Panel window size and position | chrome.storage.local |
reopens the panel where you left it |
| Pending sync operations | chrome.storage.local |
lets failed uploads retry after you come back online |
The ID of your NotesSync Data spreadsheet |
chrome.storage.sync |
so other machines on the same Chrome profile find the same sheet |
What NotesSync transmits
In local-only mode: nothing. The extension makes no network requests at all. There is no analytics, no telemetry, no crash reporting, no advertising, and no tracking of any kind — in either mode.
If you sign in with Google, and only then, NotesSync communicates directly with two Google APIs from your browser:
https://www.googleapis.com(Google Drive API) — to locate or create a single spreadsheet named NotesSync Data in your Drive.https://sheets.googleapis.com(Google Sheets API) — to read and write the rows of that spreadsheet.
The content sent is your note data: subject, details, tag, colour, created and modified timestamps, and a deleted flag. It goes to your Google account and nowhere else. The developer has no access to it and no ability to obtain it.
Google account access
NotesSync requests exactly one OAuth scope:
https://www.googleapis.com/auth/drive.fileThis is the narrowest Drive scope Google offers. It grants access only to files this extension itself creates or that you explicitly open with it. The extension cannot see, list, read, or modify any other file in your Google Drive. The broader auth/spreadsheets scope is deliberately not requested.
Authentication uses Chrome's built-in chrome.identity API, which reuses the Google account already signed into your browser. The resulting access token is held only in Chrome's own token cache. NotesSync never writes the token to storage, never logs it, and never transmits it anywhere except to Google.
Your control
- You can use NotesSync entirely without a Google account. Choose "Continue without signing in" and no network request is ever made.
- Sign out at any time from Settings. This revokes the cached token. Your notes are not deleted; you simply continue working locally.
- Delete the spreadsheet from your Google Drive at any time. NotesSync will create a new empty one the next time it syncs.
- Remove all local data by uninstalling the extension. Chrome deletes extension storage automatically.
A note on deletion
When you delete a note while signed in, NotesSync performs a soft delete: the spreadsheet row is flagged Deleted = TRUE and hidden from the app, rather than being physically removed. This keeps row references stable for pending sync operations. If you want the row physically gone, delete it yourself in Google Sheets — the extension will stop seeing it.
Children
NotesSync is not directed at children and collects no information from anyone, including children.
Changes
If this policy changes, the "Last updated" date above changes with it. Material changes will be noted in the extension's Chrome Web Store listing.
Contact
Questions about this policy or the extension's data handling: