Privacy Policy for sumItUp Chrome Extension

1. What Data We Access

Notes & Highlights:
The extension lets you create, save, and sync notes and highlights from web pages you visit. These notes are stored:
Locally in your browser (using chrome.storage.local)
Optionally, in your personal Google Drive (if you connect your account)
Google Account Info:
If you connect Google Drive, we access your Google email and Google Drive file/folder IDs to enable sync.
We use Google OAuth for authentication. Your access token is stored in memory and in Chrome’s local storage for session management.
Page Metadata:
When syncing, the extension may store page titles, URLs, and language for your notes.
Backend Service:
If you use Google Drive sync, the extension may send your user ID, email, Google ID, and file associations (not note content) to a backend service for file registration and metadata.
No note content is sent to our servers—only metadata for sync and deduplication.

Local Storage:
Notes and highlights are stored locally unless you choose to sync with Google Drive.
Google Drive Sync:
If enabled, your notes are saved to a dedicated folder in your Google Drive.
The extension only requests the minimal Drive permissions needed to create and update these files.
Backend Service:
Used only for file association and deduplication. No note content is stored on our servers.
No Analytics or Ads:
We do not use analytics, tracking, or advertising.

We do not sell or share your data.
Your notes and highlights are private to you.
If you use Google Drive sync, your data is stored in your own Google account.
Third-Party Services:
If you connect Google Drive, your data is subject to Google’s privacy policy.

OAuth:
We use Google’s OAuth for authentication. Tokens are stored locally securely and revoked on sign-out.
No Sensitive Data:
We do not collect passwords or sensitive personal information.

Not intended for children under 13. We do not knowingly collect data from children.