CardCite for Chrome: Privacy Policy

Local by default

By default, CardCite does not collect, transmit, or store your data on any external server. The extension stores your preferences (such as your team name, citation formatting, and display settings) and any citations you save to your Citation Library using Chrome's built-in storage (chrome.storage.sync and chrome.storage.local).

Unless you turn on the optional sync feature described below, this data stays on your device and your Chrome profile, is not transmitted anywhere, and is not accessible to the developer.

The extension reads metadata from the web page you are currently viewing only when you click the extension icon. This information is used solely to generate a citation on your device and is not transmitted anywhere.

Optional sign-in and cross-device sync

CardCite includes an optional feature, off until you choose to enable it, that lets you sign in with your Google account to sync your citation library across devices and to insert citations into Google Docs using the CardCite Google Docs add-on.

If you enable this feature:

• You sign in with Google. CardCite receives your basic Google account identity (your email address and standard sign-in identifiers) and uses it only to identify you and connect you to your own library.
• Your citation library is transmitted to and stored in CardCite's backend, hosted on Google Cloud (Firebase / Firestore) so it can be synced to your other signed-in devices and read by the CardCite Google Docs add-on.
• Your library stays private. Access is protected by per-user security rules, so each signed-in user's library is private to their own account. The infrastructure is operated by the developer, who maintains the systems that keep sync and the Google Docs feature running. Your data is never sold, shared, or used for any purpose beyond providing these features to you.

You can turn the feature off and sign out at any time. Signing out ends the extension's access to your Google account on that device. Citations you have stored remain in your personal library unless you delete them.

No analytics or tracking

CardCite does not use analytics, advertising, or third-party tracking services. The only external service involved, and only when you enable sync, is Google Cloud / Firebase, which hosts your library.

Data retention and deletion

Your citations and preferences remain available until you remove them. You can delete individual citations or clear your library from within the extension. If you have enabled sync, deleting a citation removes it from your synced library as well.

Limited Use disclosure

CardCite's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.