Privacy Policy

Sync Simple TODO List · Last updated 18 August 2026

There is no backend. The developer operates no server, receives no data, and has no way to see your list. The extension runs entirely in your browser and communicates only with Google's own APIs, using your own Google account.

Sync Simple TODO List is a Firefox extension that keeps a TODO list and, if you choose to connect Google Drive, syncs it between your own devices using your own Google account.

What the extension stores, and where

On your device

In the browser's extension storage:

Your TODO items — the text of each task, whether it's completed, and their order.
Your preferences — theme choice and whether auto-sync is on.
If you connect Google Drive: an OAuth access token and refresh token, used to call the Drive API on your behalf, plus two bookkeeping values — the id of the synced file and the timestamp of the last sync — used to avoid redundant downloads.

In your Google Drive

Only if you connect it:

A single JSON file (todo.json) containing your TODO items, stored in appDataFolder — a hidden, per-application folder in your own Drive account. It does not appear in your normal Drive interface and is not visible to other applications.

What the extension accesses

The extension requests exactly one Google permission: the drive.appdata scope. This is the narrowest Drive scope Google offers. It grants access only to the hidden application folder described above, which the extension creates for itself.

It cannot read, list, modify, or delete any other file in your Google Drive. It has no access to your other Google data — no Gmail, no Contacts, no Calendar, no profile information beyond what is needed to complete the sign-in.

The extension also has permission to contact googleapis.com and oauth2.googleapis.com, which is what makes those Drive and sign-in calls possible. It does not access any web page you visit; it has no content scripts and cannot read the pages you browse.

What the extension does not do

No developer backend. Nothing is sent to any server operated by the developer, because there is no such server. Network requests go only to Google's own endpoints.
No analytics, telemetry, tracking, or advertising, of any kind.
No data sharing. Your information is never sold, shared, or transferred to any third party.
No accounts. There is nothing to register for and no profile is created.
No data used for training or any purpose beyond providing the sync feature itself.

Your control over your data

Sign in is optional. The extension works fully offline as a local list. Google Drive is only contacted after you explicitly click to connect and complete Google's consent screen.
Disconnecting (from the popup or the extension's options page) deletes the stored tokens from your device and asks Google to revoke them. Your TODO items remain on your device.
Revoking access at Google Account → Third-party access has the same effect from Google's side, and also deletes the hidden application folder Google stores for this extension.
Uninstalling the extension removes all data it stored on your device. To also remove the synced copy, revoke access as described above.

Children

This extension is not directed at children and collects no personal information from anyone.

Changes to this policy

Any change will be published on this page, with the date at the top updated.

Contact

Questions about this policy or the extension can be sent to matiaswdeveloper@gmail.com.

← Back to Sync Simple TODO List