Sidecar / Privacy
Privacy
Sidecar extensions collect nothing. They have no server, make no network requests, include no analytics, and have no account system. Everything each one does happens locally in your browser, and anything stored locally is deleted when you uninstall it.
What is not happening
There is no telemetry, no crash reporting, no usage counting and no unique identifier attached to you. This is not a policy choice that could quietly change in an update: there is no code in any of these extensions that opens a network connection, which is a thing you can verify by reading them.
What stays on your machine
Two extensions keep something locally. Attachment Reminder remembers which conversations you chose to send anyway, so it does not ask twice. Draft Rescue keeps a copy of text you typed, for seven days, and refuses outright to keep passwords, card numbers, security codes, API keys and similar fields.
Both use your browser's own local storage, in your own profile. Neither syncs. Uninstalling removes it all.
Permissions, per extension
Browsers describe permissions in broad terms, so here is the specific version.
- Attachment Reminder: mail.google.com only. It runs on Gmail and nowhere else. It cannot see any other site you visit.
- Clean Copy: None. No site access at all. This is the least invasive shape an extension can take. There is no content script, so nothing runs on any page you visit until you pick the menu item yourself.
- Timezone Peek: Reads your text selection on pages. It never modifies the page. Nothing is wrapped, rewritten or scanned in the content itself, which is what keeps it from breaking editors and web apps.
- Draft Rescue: Storage, and reads the text boxes you type in. Everything is kept in your own browser profile. There is no server, no sync and no network request of any kind.
- Link Destination Check: Reads links on pages. It makes no network requests and stores nothing. It cannot follow a link to check where it lands; it compares what the text claims against the address itself.
- Draft Rot Tracker: Gmail only, plus local storage. It runs on Gmail and nowhere else. Draft subjects and dates are cached in your own browser profile so ages survive a reload, and are deleted when you uninstall.
- Cancel-By Reminder: Gmail only, plus storage, alarms and notifications. It reads a message when you open it, in the tab, to look for subscription wording and a date. Nothing is sent anywhere. Saved reminders hold a service name, a date and a link back to the thread, and are deleted a week after the date passes.
- Meeting Link Surfacer: Google Calendar only, plus local storage. It reads events already rendered on the Calendar page. No Calendar API, no account linking, no network requests. The only thing stored is which chips you dismissed, for three days.
This website
The site itself sets no cookies and runs no analytics. Fonts are requested from Google Fonts, which is the only third party involved in loading this page. If you would rather that request did not happen, the extensions themselves are entirely unaffected by it.
Contact
Questions about any of this can go to hello@sidecarstudios.org.