Privacy Policy

Last updated: October 2026

sheetXtend is a Google Sheets audit and formatting toolbar that runs entirely in your browser. It never sends your spreadsheet data to any server except Google's own Sheets API, authenticated by your own Google account.

No data leaves your account

• The extension makes network requests to exactly one host: https://sheets.googleapis.com/. Nothing else — no analytics, no telemetry, no third-party servers.
• Spreadsheet data is read from and written to Google's servers only, using your own OAuth token. No copy of your data is stored or transmitted anywhere else.
• Saved formats and UI preferences live in chrome.storage.local on your device, and are removed when you uninstall the extension.

Works only on the sheet you have open

• The extension operates on the spreadsheet currently open in your browser tab. It does not create, delete, or scan other spreadsheets.
• Every API call is scoped to that single spreadsheet's ID (read from the open tab's URL), never to a list of your files.

About the "all your spreadsheets" permission

• The Google consent screen says the extension can "see, edit, create, and delete all your Google Sheets spreadsheets." That wording is Google's, not ours.
• Google's Sheets REST API offers exactly two scopes — spreadsheets (full) and spreadsheets.readonly. There is no per-file or "current sheet only" scope. Because sheetXtend writes formatting (Brush Plus, Smart Indexer), it must use the full spreadsheets scope. It is the minimum scope that allows the job.
• Despite that broad wording, the extension's code only ever touches the sheet you have open.

Permissions, and why each is needed