Privacy Policy

Overview

Save to Google Photos Album lets you save images from web pages to your own Google Photos. The developer operates no server and never receives your images or your data.

What the extension accesses

When you sign in with Google, the extension requests only:

• permission to add to your Google Photos (upload the images you choose and create albums);
• permission to view the albums this extension created (to list them so you can pick one); and
• your email address (shown in the popup so you know which account is connected).

It handles only the specific images you choose to save.

Website access

• The extension has no access to the websites you visit by default, and nothing from it runs on a page until you use it.
• When you choose "Save to Google Photos Album" from the right-click menu, Chrome gives the extension temporary access to that one tab (the activeTab permission). It uses this only to find the image you right-clicked, show its dialog and result message, and read that image. The access ends when the tab navigates away or is closed.
• To read the image, the extension first asks the page itself to load it, in the same way the page already displays it (including the site's own cookies for its own images). The extension does not read, store, or send the site's cookies or any other page content.
• Some image hosts do not allow this. In that case the extension shows a window asking you to allow access to that one host (for example cdn.example.com), and Chrome asks you to confirm. Access is requested only when you save an image from that host, is used only to download the images you choose to save, and can be removed at any time on the extension's details page in Chrome.

Data stored by the extension

Stored locally in your browser: the Google sign-in token, the email address and Google account ID of the signed-in account (so the sign-in can be renewed without asking again), and a cached list of the albums this extension created. Your appearance (theme) preference is stored with Chrome Storage Sync and may sync between Chrome browsers signed in to the same Google account. The developer cannot access any of this.

Data not collected

The extension cannot browse your Google Photos library or read your photos. It does not collect your browsing history, website content, search queries, analytics, or advertising identifiers.

How Google user data is used

Google user data obtained through the extension (the images you choose to save, the albums it created, and your email address) is used solely to provide the feature you invoke: uploading the chosen image to your Google Photos, creating or selecting an album for it, and showing which account is connected. It is not used for advertising, profiling, analytics, or to develop, improve, or train any AI or machine-learning models.

Data sharing, transfer, and disclosure

The developer does not share, transfer, sell, or disclose Google user data to any third party. Specifically:

• Images you save are uploaded directly from your browser to Google's Photos Library API (photoslibrary.googleapis.com). Your email address is retrieved from Google's OAuth userinfo endpoint and displayed only in the popup. Google's handling of that data is governed by the Google Privacy Policy.
• To save an image, the extension downloads it from the website that hosts it, then uploads it to Google. Apart from that download, the extension communicates only with Google's sign-in and Photos endpoints.
• No data passes through, or is stored on, any server operated by the developer. There are no analytics, tracking technologies, advertising networks, or remote code.
• No data is transferred to any other person, company, or service, in any country. The developer would disclose data only if required by law; because the developer holds no user data, there is nothing that could be disclosed.

Data protection

The extension protects the sensitive data it handles as follows:

• Authentication uses Google's OAuth 2.0 flow via the Chrome identity API. The extension never sees or stores your Google password.
• The OAuth access token is kept only in Chrome's extension-private storage (chrome.storage.local), which is isolated from web pages by the browser's extension sandbox. It is never written into any web page, exposed to page scripts, logged, or sent anywhere other than Google's own API endpoints.
• The token is short-lived (it expires within about one hour and is re-obtained through Google when needed). No refresh token is stored.
• All network traffic between the extension and Google uses HTTPS/TLS.
• The extension requests only the minimum scopes needed: it can add images and create albums, and can list only the albums it created. It cannot read, browse, or download your existing photos or albums.
• The extension runs only in response to your explicit actions (right-clicking an image and choosing a menu item, or using the popup).

Data retention and deletion

• Access token, signed-in account (email and account ID), and album list: kept only on your device. All are deleted when you click Sign out in the popup (which also revokes the token with Google) or when you remove the extension. The token additionally expires on its own within about one hour.
• Theme preference: kept in Chrome Storage Sync until you remove the extension.
• Access to image hosts you allowed: kept by Chrome until you remove it on the extension's details page or remove the extension. The extension keeps no record of the sites you visited.
• Images and albums saved to Google Photos: stored by Google in your own Google Photos account, not by the developer. You can view, edit, or delete them at any time in Google Photos; deletion there is governed by Google's retention practices.
• Revoking access: you can revoke the extension's access to your Google account at any time at myaccount.google.com/permissions. Revocation takes effect immediately; the extension will simply ask you to sign in again if you use it afterwards.
• The developer retains no Google user data, so there is no developer-side data to delete and no retention period beyond what is described above.

Limited Use

The use of information received from Google APIs and Chrome APIs adheres to the Google API Services User Data Policy and the Chrome Web Store User Data Policy, including the Limited Use requirements.

Contact

Questions about this policy may be directed to the support email address displayed on the extension's Chrome Web Store listing.