Last updated 5 October 2026 · Applies to the ShiftSheet Employee Timesheet & Shift Schedule Google Sheets add-on
The short version. This add-on has no server. It runs inside Google Sheets on Google's own infrastructure. We do not receive, store or see your spreadsheet, your staff names, their hours or their pay. The add-on itself makes no network calls at all: nothing is sent to us, and nothing is sent to any third party. This is described in full below.
ShiftSheet is an independent add-on published by an individual developer. Contact: support@shiftsheet.me.
The add-on's own code requests one permission from Google, and Google classes it as non-sensitive. If you install from the Google Workspace Marketplace, Google's install screen lists two more that come from our Marketplace listing configuration rather than from the add-on. All three are non-sensitive. Here is every one of them:
| Permission | Google classification | What it allows | Why it is needed |
|---|---|---|---|
spreadsheets.currentonly |
Non-sensitive | Read and write only the single spreadsheet you have open while the add-on is running. | To build the schedule grid and write the report sheets. |
userinfo.email |
Non-sensitive | See your primary Google Account email address. | Requested by the Marketplace listing. ShiftSheet's code never reads it — it is not in the add-on's manifest, and only appears if you install from the Marketplace. |
userinfo.profile |
Non-sensitive | See your basic profile info, including anything you have made publicly available. | Same as above: listing configuration only, never read by the add-on. |
Because all three are non-sensitive, the "Google hasn't verified this app" screen should not appear, on either route. If you do see it, click Advanced, then Go to ShiftSheet (unsafe), then Allow.
Because the spreadsheet permission is currentonly, the add-on
cannot see your other spreadsheets, your Google Drive, your Gmail, your Google
Calendar, your contacts, or anything else in your Google Account. This is enforced by
Google, not by us.
The only Google user data the add-on accesses is the content of the single spreadsheet you have open at the time: the staff names, shift codes, hours and rule settings you type into it. That data is read in order to build the schedule and run the checks, it is written back to the same spreadsheet, and it is used for nothing else. It is never sent to us, never stored outside your own Google Account, and never shared with anyone. We access, use, store and share no other Google user data.
We do not collect, receive, store or transmit your spreadsheet content. We operate no servers, no database, and no analytics.
The add-on saves ten small pieces of information using Google's own storage service
(PropertiesService), which keeps them inside your Google Account and the
document you are working in. We cannot read any of them, and none of them is ever
sent anywhere:
The add-on makes no network calls. It contacts no server of ours, because we run none, and it contacts no third party either. Nothing is sent when you install it, nothing is sent while you use it, and nothing is sent when you buy the paid version.
The paid version is unlocked with a licence code. The code is checked inside the add-on, against a list in its own code; it is never sent to us or to anyone else. (Copies of the paid template sold before October 2026 are decided by a line in their own code, as before.)
ShiftSheet's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically: we do not transfer your Google user data to third parties except as necessary to provide or improve the add-on; we do not use it for advertising; we do not sell it; and no humans read it, because it never reaches us in the first place.
There is no exception to this. No Google user data, and nothing derived from it, is transferred anywhere by the add-on, because the add-on makes no network calls.
Since we hold no copy of your data, there is nothing on our side to retain or delete.
This add-on is a business tool and is not directed at children under 13. We do not knowingly collect information from children — or, indeed, from anyone.
If this policy changes, the date at the top of this page changes with it. If a change ever meant the add-on started collecting data it does not collect today, that would require a new permission, and Google would ask for your consent before it took effect.
Questions about this policy, or about what the add-on does with anything: support@shiftsheet.me.