Privacy Policy

Last updated: 29 August 2026

Icons is published by Going Stellar SRL, Romania. This policy describes exactly what the add-on does with your data. It is short because the add-on does very little.

The permissions we ask for

Icons requests three Google permissions:

Scope	What it allows	Why we need it
`presentations.currentonly`	View and manage the Google Slides™ presentation the add-on is installed in.	To place the icon you tap onto the slide you are on, and to read your theme's colours when you ask for them.
`documents.currentonly`	View and manage the Google Docs™ document the add-on is open in — and only that one, only while it is open. Needed to place the icon at your cursor.
`script.external_request`	Lets the add-on download the icon image. Needed only in Google Docs™, which cannot place an image from a web address. The manifest restricts this permission to a single address — `legal.syncerp.work/i/`, our icon server — so it cannot reach anywhere else.

That is the whole list. We cannot see your other presentations, your Drive™, your email, your calendar or your contacts, because we never asked for permission to.

What we never receive

Nothing from inside your presentation or document ever reaches us. Not its text, not its images, not its name, not your theme, not who you are.

The add-on makes exactly one kind of network request, and only to fetch an icon image:

In Google Slides™ it makes none at all — Google fetches the image for the slide.
In Google Docs™ the add-on downloads the icon image itself, because Docs cannot place an image from a web address. That is the only reason it holds the permission to make web requests, and the manifest limits that permission to a single address: our icon server.

What our icon server does see

Icon images are not bundled into the add-on — they are drawn on our server, so that any of the 125,000 icons can be produced in any colour you choose. When the panel shows you a grid of icons, or when an icon is placed in your slide or document, a request for that image reaches our server at legal.syncerp.work.

That request contains only this: which icon set, which icon name, which colour and what size. For example /i/material-symbols/rocket-launch.png?c=1a73e8.

Like any request to any website, the connection also carries an IP address — sometimes yours, sometimes Google's, depending on whether your browser or Google's servers fetched the image. We do not log these requests. Access logging is switched off for them, so no record of who asked for which icon is written or kept. There is no analytics, no tracking pixel, no cookie and no profile.

We cannot tell from an icon request what your presentation or document is about, and we do not try to.

What is stored, and where

Your settings — the style, colour, weight and size you last used, and the icons you have saved — are stored by Google in your own Google account, using the Apps Script user-properties store. We cannot read them. Removing the add-on stops it from running; Google™ does not give an add-on a way to run code at uninstall, so we do not claim that uninstalling erases these settings. You can clear them from the panel at any time.

A Pro licence key, if you have one, is stored the same way and is verified inside your account, mathematically, without contacting any server of ours. We do not learn when or how often you use Pro.

Who we share your data with

We share Google user data with no third party — and, in truth, we have none to share. The add-on sends nothing from your presentation or document anywhere: not its text, not its images, not its name, not your identity. There is no analytics provider, no advertising network, no data broker, no sub-processor and no affiliate, no transfer as part of any merger, acquisition or sale of assets, and nothing we could disclose in response to a legal request, because we hold nothing.

The only outbound request the add-on makes is to our own icon server, to fetch the icon you picked. It carries the icon's name, size and colour — no document content and no identifier — and we keep no log of it.

How your data is protected

Because the add-on collects nothing, most protection comes from what it never does. What remains is protected as follows:

Encryption in transit. Every request the add-on makes travels over HTTPS (TLS). legal.syncerp.work is served over TLS only, with HTTP redirected to HTTPS; there is no plaintext endpoint.
Encryption at rest. The only data that persists is your own settings and, if you have one, your licence key, held by Google inside your Google account in the Apps Script properties store, encrypted at rest by Google. We hold no copy.
Data minimisation. The content of your presentation or document never leaves your Google account. Nothing identifying you is sent to us, and we operate no database of user data.
Access control. There is no user data on our servers to access. The server itself is reachable only by the publisher over key-based SSH, with password authentication disabled.
Retention and deletion. We keep no logs of add-on requests, so there is nothing to retain or delete on our side. Settings stored in your Google account can be cleared from the panel at any time, and are yours to remove.
Incidents. A security concern reported to gheorghe.beschea@overheat.agency is answered by a person, and any incident affecting users would be published on this page.

Artificial intelligence and machine learning

We do not use Google Workspace™ data obtained through Google Workspace APIs to develop, improve or train generalised or non-personalised artificial-intelligence or machine-learning models. The add-on contains no AI or machine-learning component, and no Workspace data is transferred to any AI/ML platform or third party for any purpose.

No third parties

We do not sell, rent or share data, because we do not collect any to share. We use no advertising network, no analytics provider and no third-party tracker. There is no user account to create and no password to give us.

Children

The add-on is a tool for working with presentations and is not directed at children under 13.

Changes and contact

If this policy changes, the date at the top changes with it and the new version is published here. Questions, or a request about your data: gheorghe.beschea@overheat.agency — a person answers.