Privacy Policy

Effective November 15, 2026

This policy explains how The Short List ("the app") accesses, uses, stores and shares data, including data received from Google APIs. The app is a private, single-user app run by its developer for personal use.

Google user data the app accesses

If you connect Google Calendar, the app requests these Google permissions (OAuth scopes):

• https://www.googleapis.com/auth/calendar.events: view and edit events on your calendars. The app uses it only to create, update and delete the events for dates you plan in the app, on your primary calendar, and to read back those same events. It does not read, list or change any other events.
• openid and email (userinfo.email): your Google account identifier and email address, used only to confirm which Google account is connected so the app never writes to the wrong calendar.

How the app uses Google user data

• To add, change or remove calendar events for dates you save, edit or cancel in the app. An event may contain the date's title, time and place. If you turn on the option to add a separate calendar hold for another address you choose (such as a work calendar), that address is invited to a hold event that contains only a title, time and, if you allow it, the place.
• To show you, in the app's settings, whether the calendar connection is working.

Google user data is used only to provide these user-facing features. It is not used for advertising, is not sold, and is not used to develop, improve or train generalized artificial intelligence or machine learning models.

Limited Use disclosure

The Short List's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What is stored, and where

• A Google sign-in (refresh) token, your Google account identifier and email address, and the IDs of the calendar events the app created.
• This information is stored only on the developer's own private computer, in a file readable only by the app's owner account. It is not stored on any third-party server or cloud service, is not written to logs, and is excluded from backups.
• Access tokens are sent only to Google, over encrypted HTTPS connections.

Sharing

Google user data is not sold, rented or shared with anyone. It is not transferred to third parties except as needed to comply with law. No people other than the user read Google user data, except where necessary for security purposes (for example, investigating a bug or abuse) or to comply with applicable law.

Retention and deletion

• The token and account details are kept only while Google Calendar is connected.
• Disconnecting Google Calendar in the app's settings revokes the token with Google and deletes the stored token file immediately.
• You can also revoke access at any time at myaccount.google.com/permissions.
• Calendar events the app created stay in your Google Calendar under your control; you can edit or delete them in Google Calendar at any time.

Other data

Notes and plans you type into the app are stored on the same private computer and are not combined with, or shared as, Google user data.

Changes

If this policy changes, the updated version will be posted on this page with a new effective date. Google user data will not be used in new ways without first updating this policy and asking for consent where required.

Contact

Questions about this policy: [CONTACT EMAIL - to be added].