Spark4

Stash It Privacy Policy

Last Updated: March 26, 2025

1. How Stash It Works

Stash It is a browser extension that helps you save web pages as calendar events for future reference. Here's how it operates:

  • When you click "Stash It", the extension creates a Google Calendar event with your webpage link
  • All processing happens directly in your browser - we have no servers collecting or storing your data
  • The extension only accesses the current tab's URL and title when you explicitly click to create an event
  • Communication occurs directly between your browser and Google Calendar using OAuth2 authentication

2. Data Collection and Storage

Stash It is designed with a zero-data-retention policy:

  • We do not collect, store, or transmit any personal data
  • The only local storage used is for notification management and your default time preference
  • No browsing history or patterns are tracked or stored
  • No analytics or tracking code is included in the extension
  • Calendar events are created directly in your Google Calendar - we don't store copies

3. Required Permissions

The extension requires minimal permissions to function:

  • "identity" - For Google Calendar OAuth2 authentication
  • "tabs" and "activeTab" - To access the current tab's URL and title
  • "storage" - To save your default time preference and manage notifications
  • "notifications" - To show confirmation when events are created

4. Google Calendar Integration

Our Google Calendar integration uses industry-standard security practices:

  • OAuth2 authentication with limited calendar event creation scope
  • Direct browser-to-Google API communication - no intermediary servers
  • Access tokens are managed securely by your browser
  • The extension can only create new events, not read or modify existing ones

5. Security Measures

We implement the following security measures:

  • Client-side only processing - all operations happen in your browser
  • No external data transmission except to Google Calendar API
  • Content Security Policy (CSP) headers to prevent injection attacks
  • Regular security audits and code reviews

6. Your Rights

Since we don't collect or store any personal data, there is no user data to access, modify, or delete. You can remove the extension at any time, which will remove any locally stored preferences. Calendar events you've created will remain in your Google Calendar under your control.

7. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. Updates will be published through the Chrome Web Store.

8. Contact Us

For privacy-related inquiries, please contact us at:

Email: privacy@spark4.tech

Address: Spark4, 1220 Main Street, Vancouver, WA 98660, USA

Last updated: March 26, 2025