Back to Slaet
Legal

Privacy Policy

Slaet — Notes & Tasks on Every New Tab  ·  Last updated October 7, 2026

This privacy policy describes how Slaet ("we", "our", or "the extension") handles your information. We keep it short because we genuinely do not collect much.

What we collect

When you sign in with Google we receive your Google account email address and user ID via OAuth. These are used solely to identify your account and sync your data across devices.

If you choose to sign in, the notes and tasks you create are synced to our servers so they are available on any device. If you use Slaet without signing in, your notes and tasks stay only on your device and we never see them.

If you submit feedback through the in-extension feedback form, the text of your feedback is sent to us via Web3Forms so we can read and respond to it.

When you uninstall the extension, Chrome opens a short optional survey. If you answer it, your chosen reason, any text or email you add, and the extension version number are sent to us via Web3Forms. Nothing is sent if you just close the page.

What we do not collect

We do not record or transmit your browsing history. Two optional features touch the pages you use, and only when you turn them on:

  • Shortcuts shows your most-visited sites on the new tab. Chrome provides that list to the extension on your device; it is displayed there and never sent to us.
  • Save to Slaet (right-click menu) saves the text, link, or page address you choose as a task or note — only the item you right-click, only when you click it.

Analytics

On our web app, and only if you consent, we use Mixpanel to understand how Slaet is used so we can make it better. Mixpanel processes a randomly generated identifier, your interactions with the app, and your IP address (used for a coarse location and then discarded — we do not store it). Nothing loads or is sent until you accept, and you can decline with no loss of functionality.

In the browser extension, the same privacy-friendly analytics are covered by the disclosure you agree to when you install. As above, we never read, record, or transmit your browsing history. Mixpanel's privacy policy is available at mixpanel.com/legal/privacy-policy.

How your data is stored

Notes and tasks are stored locally in chrome.storage and localStorage on your device at all times.

If you are signed in, a copy of your notes and tasks is also stored on Supabase servers tied to your user ID. Supabase is a third-party backend-as-a-service provider. Their privacy policy is available at supabase.com/privacy.

Google Calendar

Connecting Google Calendar is optional. You can turn it on, and off again, in Settings → Connections. It requires a Slaet account.

What we access. When you connect, Slaet asks Google for:

  • Your Google account email address, to show which Google account is connected and to open Google Meet in that account.
  • Permission to create and manage calendars that Slaet creates. Slaet creates one calendar named “Slaet” and adds your tasks that have a due date to it as events, updating or removing them as your tasks change. This permission does not let Slaet see or change any of your other calendars.
  • Read-only access to your calendar events. Slaet reads your remaining meetings for the current day to show them on your new tab and to notify you 5 minutes before each one. For each meeting it uses only the title, start and end time, the video-call link, and the link to the event.

How it is stored. The access tokens Google issues are kept on our servers (Supabase), are accessible only to our backend services, and are never sent to your browser. Meeting details are not stored on our servers: they pass through to your device, which keeps a copy for the current day only. To keep your Slaet calendar in step with your tasks, our servers store the link between each task and its Google Calendar event (identifiers only).

What we never do. We do not sell Google user data, use it for advertising, or use it to train AI models, and no one at Slaet reads it except with your permission, for security purposes, or where the law requires it. It is shared only with the infrastructure provider that runs the feature (Supabase).

Disconnecting. When you disconnect, Slaet revokes its access at Google, deletes the “Slaet” calendar, and deletes the stored tokens, the task-to-event links, and the meetings saved on your device. Deleting your Slaet account deletes the stored tokens and task-to-event links from our servers. You can also remove Slaet's access at any time at myaccount.google.com/permissions.

Slaet's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Deleting your data

You can delete your account and all synced data at any time directly from the extension settings. Once deleted, your data is removed from our servers and cannot be recovered.

Third-party services

Slaet uses the following third-party services:

  • Supabase — cloud storage and authentication backend.
  • Google OAuth — sign-in. Signing in gives us only your email address and user ID.
  • Google Calendar API — only if you connect Google Calendar; see Google Calendar above for exactly what it accesses.
  • Mixpanel — product analytics on the web app, used only with your consent to understand how Slaet is used.
  • Web3Forms — a form-submission relay. When you send feedback through Slaet, your message (and any contact details you include) is delivered to us via Web3Forms, used only to deliver that feedback.

No data is sold to or shared with any other third party.

Contact

Questions about this policy? Email us at slaetapp@gmail.com.