CardCite for Google Docs: Privacy Policy

Information the add-on accesses

The add-on requests only the access it needs to do its job:

• Your basic Google account identity (your email address and the standard sign-in identifiers). This is used to identify you and connect you to your own CardCite library. The add-on does not use your identity for any other purpose.
• The active document, for the sole purpose of inserting a citation at your cursor. The add-on uses the "current document only" level of access. It does not read, collect, or store the contents of your document. It only writes the citation text you choose to insert.
• The ability to display its own sidebar inside Google Docs.
• The ability to make a secure network request to the CardCite backend in order to retrieve your saved citations.

Information the add-on stores

The add-on does not maintain its own separate database of your data. It reads your existing citation library at the moment you use it and inserts the citation you select. It does not store your document content, and it does not retain copies of your citations outside of your existing CardCite account.

How your information is shared

Your information is not sold, rented, or shared with third parties. The only services involved are Google (for sign-in and Google Docs) and Google Cloud / Firebase (which hosts your CardCite library). No advertising or tracking services are used.

How your information is protected

All communication between the add-on and its backend happens over encrypted HTTPS/TLS connections, including sign-in requests and requests that load your citation library. Your citation library is stored in Google Cloud Firestore, protected by per-user security rules: each signed-in user can read and write only their own library, and no other user or party can access it.

The add-on never sees or stores your Google password. Sign-in is handled entirely by Google's own OAuth consent flow, and the add-on holds only the short-lived token Google issues for your session.

Data retention and deletion

Your citation library is controlled through your CardCite account. You can remove citations or stop syncing at any time using the CardCite extension; deleting a citation removes it from the synced library in Firestore. Signing out of the add-on ends its access to your account on that device.

To request deletion of your entire account and all synced data, email elliott7987@gmail.com and it will be removed.

Limited Use disclosure

CardCite for Google Docs' use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.