Privacy Policy

What We Collect

We collect nothing on our servers. QuickGCal has no backend server, and no data ever leaves your browser to reach Neural Work. We do not receive, store, or process your personal data on any system we control.

To function, the extension does cache a limited amount of Google user data locally on your own device: your upcoming calendar events and a Google OAuth access token, held in your browser's local extension storage. This data stays on your device — it is never transmitted to us or to any third party. See Data Security & Protection and Data Retention & Deletion below for details.

Google Calendar Access

QuickGCal displays your Google Calendar inside a browser popup. To do this, it uses Google's OAuth authentication — you sign in directly with Google. We never see, receive, or store your Google account credentials.

Your calendar data is fetched directly from Google's servers to your browser over an encrypted connection. Neural Work has no access to it at any point.

Permissions Explained

• Google Calendar (read access): Required to display your calendar events in the popup. We request the minimum scope necessary.
• Identity: Required for Google OAuth sign-in. Used only to authenticate you with Google — not stored by us.

Data Security & Protection

We treat your Google Calendar data as sensitive personal information and protect it as follows:

• Encrypted in transit: All calendar data is fetched directly from Google's servers over an encrypted HTTPS/TLS connection. It travels only between your browser and Google.
• Secure authentication: Sign-in uses Google's OAuth 2.0. QuickGCal never sees or handles your Google account password or credentials.
• Stored only on your device: Your calendar events and OAuth access token are cached solely in your browser's local extension storage on your own device. They are never uploaded to Neural Work servers (we have none) and are never shared with any third party.
• Minimum access: We request only the read-only calendar scope (calendar.readonly) — the least access needed to display your events. QuickGCal cannot modify or delete your calendar.
• Automatic token invalidation: The stored access token is validated against Google; if it is expired or revoked, the extension discards it and clears the locally cached data.

Data Retention & Deletion

Because QuickGCal stores Google user data only locally on your device and never on our servers, no server-side retention period applies. On-device data is handled as follows:

• Calendar events: Cached locally to display your schedule and refreshed roughly every 15 minutes, with each refresh overwriting the previous cache.
• Access token: Stored locally until it expires or you revoke it.
• Automatic deletion: When the token becomes invalid — for example after you revoke access or it expires (a 401 response from Google) — the extension automatically clears the cached calendar data and token from local storage.

You can delete all stored data at any time using any of these methods:

• Uninstall the extension — this immediately removes all data QuickGCal has stored in your browser.
• Revoke access at myaccount.google.com/permissions — this invalidates the token, after which QuickGCal clears its local cache.
• Clear the extension's browser data via your browser's site/extension data settings.

Analytics & Tracking

The QuickGCal extension itself contains no analytics or tracking code. This website (neuralwork.net) uses Google Analytics to measure aggregate page visits, but the extension does not.

Data Sharing

We do not share any data with third parties because we do not collect any data to share.

Children's Privacy

QuickGCal is not directed at children under 13. We do not knowingly collect data from anyone.

Changes to This Policy

If we update this privacy policy, the new version will be posted at this URL. The "Last updated" date at the top will reflect the change.

Contact

Questions about this privacy policy? Email us at neuralwork.net@gmail.com.