Privacy Policy

Sticky Notes for Gmail™ — Effective July 26, 2026

Sticky Notes for Gmail

This policy explains what Sticky Notes for Gmail (the “app,” comprising the Chrome extension and the companion Google Workspace add-on) does with information, and — just as importantly — what it does not do. The app is published by traumababies, a trade name of Bisbee LLC.

The short version

Your notes are stored in your own Google Drive™, in a private application-data folder reserved solely for this app. We operate no servers. We never receive, store, transmit, or have access to your notes. Your notes remain within your Google account, on Google’s infrastructure, under your control.

What information the app handles

• Your notes (the text and color you enter): Saved directly to your own Google Drive application-data folder. This content never reaches us and is not sent to any server we operate, because we operate none. No human reviews your notes, and your data is never used for AI training, machine learning models, or advertising purposes.
• A Gmail™ conversation identifier: To attach each note to the correct email, the app reads the identifier of the conversation you have open. This identifier is stored alongside your note, in your own Drive. The app does not read, collect, store, or transmit the contents of your emails.
• An authentication token: To read and write your notes file, the app uses Google’s standard OAuth to obtain a token scoped only to your private application-data folder (the drive.appdata scope). This token authorizes access to your own Drive folder and nothing else. We never receive your Google password or credentials.
• Local settings and cache: The extension may store your preferences and a local cached copy of your notes on your own device, so notes appear instantly. This local data stays on your device and is not transmitted to us.

What the app does NOT do

• We do not operate servers that receive or store your notes.
• We do not read, collect, or transmit the content of your emails.
• We do not collect personally identifiable information, health information, financial information, location, web browsing history, or your activity across the web.
• We do not sell or transfer your data to third parties.
• We do not use your data for advertising, credit, or lending purposes.
• We do not use or transfer your data for any purpose unrelated to the app’s single purpose.

Permissions the extension requests, and why

• Google Drive (drive.appdata scope): To save and sync your notes in a private folder in your own Drive that only this app can see.
• identity: To authenticate you to your own Google Drive via OAuth. We never receive the token or your credentials.
• storage: To keep your local settings and a local cache of your notes on your device for instant display.
• Access to mail.google.com: The extension runs only on Gmail, where it reads the open conversation’s identifier and displays your note. It does not run on or access any other website.

Google API Services User Data Policy

The app’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data accessed through Google APIs is used solely to provide and improve the app’s single, user-facing feature — attaching notes to your Gmail conversations — and is never used for advertising, sold, or transferred except as required to provide that feature.

Data storage and security

Because your notes live in your own Google Drive, they are protected by Google’s account security and your own account settings. We hold no copy and maintain no database of your notes. If you uninstall the app, your notes remain in your Drive until you choose to delete them; you may remove the app’s data folder at any time through your Google account.

Data protection mechanisms

Your notes are protected by the following safeguards:

• Encryption in transit: All communication between the app and Google’s servers uses HTTPS (TLS 1.2 or higher).
• Encryption at rest: Your notes are stored in Google Drive, which encrypts all data at rest using AES-256.
• Access isolation: The app’s OAuth token is scoped exclusively to a private application-data folder (drive.appdata) and cannot access any other file in your Drive. We never receive, store, or have access to your token or your Google credentials.
• No server-side storage: We operate no servers, databases, or logs. Your notes exist only in your Google account and on your local device.
• Data minimization: The app reads only the Gmail conversation identifier needed to attach your note. It does not read, collect, or transmit email content, subject lines, or sender/recipient information.

Optional email updates

The app requires no email address to use. If you choose to share one, you decide independently whether to receive news of the Sticky Notes app, of new apps from traumababies, both, or neither. You may unsubscribe from either at any time, and we do not sell your email address to unrelated third parties.

Change of ownership

traumababies may sell or transfer the Sticky Notes app. In that event, subscribers to Sticky Notes updates may have their subscription passed to the new owner, who will identify itself and provide a means to unsubscribe; subscribers to traumababies updates remain with traumababies.

Children

The app is not directed to children under 13 and does not knowingly collect information from them.

Changes to this policy

Should this policy change, the revised version will be published here, bearing a new effective date.

Contact

Questions about this policy or the app: stickynotes@traumababies.com