This Privacy Policy describes how WorkSlots ("we", "us", "our", or the "Application") handles information when you use our web application located at this website (the "Service"). By using WorkSlots, you agree to the practices described in this policy.

1. Overview

WorkSlots is a client-side web application that helps you define and manage work time slots on your Google Calendar. The Application runs entirely in your web browser. We do not operate any backend servers, databases, or cloud infrastructure that stores your data. All data processing happens locally in your browser and directly between your browser and Google's servers.

2. Information We Collect

2.1 Information We Do NOT Collect

WorkSlots does not collect, store, transmit, or have access to any of the following:

• Your name, email address, or Google account profile information
• Your Google Calendar data (events, calendars, descriptions)
• Your Google OAuth access tokens or refresh tokens
• Analytics, tracking, or telemetry data
• IP addresses, device identifiers, or browser fingerprints
• Cookies used for advertising or cross-site tracking
• Any personally identifiable information (PII)

2.2 Data Stored Locally in Your Browser

WorkSlots stores the following data exclusively in your browser's local storage (localStorage):

• Theme preference: Your choice of light or dark mode (stored as the string "light" or "dark").

This data never leaves your device and can be cleared at any time by clearing your browser's site data.

2.3 Data Stored in Google Calendar

When you use WorkSlots, the following data is written directly to your Google Calendar account through the Google Calendar API:

• A dedicated "WorkSlots" calendar: The Application creates a calendar in your Google account to manage work slot events.
• Slot type definitions: Your custom slot type configurations (name, start time, end time, color) are stored in the description field of the WorkSlots calendar.
• Calendar events: When you sync, the Application creates, updates, or deletes events in the WorkSlots calendar. Each event includes a title (slot name), start/end time, color, a description noting "Created via WorkSlots", and a private extended property to identify it as a WorkSlots-managed event.

This data is stored in your own Google account and is subject to Google's Privacy Policy. WorkSlots has no server-side access to your Google account; all API calls originate from your browser using your own OAuth token.

3. Google API Services Usage

3.1 Authentication

WorkSlots uses Google OAuth 2.0 for authentication. When you click "Connect Google", you are redirected to Google's own consent screen where you authorize WorkSlots to access your Google Calendar. The OAuth access token is managed entirely by Google's client libraries in your browser. We never see, store, or transmit your access token.

3.2 Permissions Requested

WorkSlots requests the following Google API scope:

• https://www.googleapis.com/auth/calendar — To find or create the dedicated WorkSlots calendar, manage its description (where slot type configurations are stored), load existing WorkSlots-managed events, and create, update, or delete events during sync. This broad scope is required by Google Calendar API operations used by WorkSlots, even though WorkSlots is designed to operate only on the dedicated calendar and WorkSlots-managed events.

These permissions are used solely for the functionality described above. WorkSlots does not read, modify, or delete any events or calendars other than those it creates and manages.

3.3 Google API Services User Data Policy

WorkSlots' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Third-Party Services

WorkSlots loads the following third-party resources directly in your browser:

• Google APIs (apis.google.com, accounts.google.com) — For Google Calendar API access and OAuth 2.0 authentication.
• Tailwind CSS CDN (cdn.tailwindcss.com) — For styling the user interface.
• Google Fonts (fonts.googleapis.com) — For the Inter typeface.

These third-party services may collect information as described in their respective privacy policies. We encourage you to review them:

• Google Privacy Policy
• Tailwind CSS

5. Data Retention and Deletion

Since WorkSlots does not store any of your data on our servers:

• Browser data (theme preference): You can delete this at any time by clearing your browser's site data or localStorage for this website.
• Google Calendar data: You can delete the WorkSlots calendar and all its events at any time directly through Google Calendar. You can also revoke WorkSlots' access to your Google account at https://myaccount.google.com/permissions.

Once you revoke access and/or delete the WorkSlots calendar, no trace of your usage remains, as we do not maintain any server-side records.

6. Data Security

All communication between your browser and Google's servers occurs over HTTPS (encrypted in transit). Since WorkSlots operates entirely client-side, there is no server-side attack surface controlled by us. However, the security of your data also depends on:

• The security of your Google account (we recommend enabling two-factor authentication).
• The security of your web browser and device.
• Your network security (avoid using WorkSlots on untrusted public networks without a VPN).

7. Children's Privacy

WorkSlots is not directed at children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect any personal information from children. If you believe that a child has used this Application, please note that since no data is collected by us, there is no personal data of the child in our possession. You may revoke the Application's access to the child's Google account at any time via Google's account permissions page.

8. International Users

WorkSlots is a client-side application. Your data is processed locally in your browser and communicated directly to Google's servers. We do not transfer your data to any other jurisdiction. Google may process your data according to their own privacy practices and data transfer mechanisms as described in their privacy policy.

9. Your Rights

Depending on your jurisdiction (e.g., under GDPR, CCPA, or similar legislation), you may have the right to:

• Access the personal data held about you.
• Request deletion of your personal data.
• Request correction of inaccurate data.
• Object to or restrict processing of your data.
• Data portability.

Since WorkSlots does not collect or store any personal data on its own servers, we are unable to fulfill data access or deletion requests because we simply do not have your data. All data resides in your own Google account, where you have full control. To exercise your rights with respect to Google-held data, please refer to Google's Data & Privacy settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Your continued use of WorkSlots after any changes constitutes acceptance of the revised policy. We encourage you to review this page periodically.