Tabquill Privacy Policy

Effective November 8, 2026

Tabquill is a Google Docs™ add-on that lists the tabs in a document with a word count for each, opens the tab you click, gives you download links for a single tab, and copies all of a document's tabs into one tab you pick. It is published by Front Porch Puzzle Press ("we"). It runs entirely inside Google Apps Script under your Google account. We do not operate a server for Tabquill, have no user accounts, and never receive your document content.

Google user data Tabquill accesses

Tabquill requests three Google OAuth scopes and nothing else:

The content of the document you open it in, and only that document (scope https://www.googleapis.com/auth/documents.currentonly): the document's ID and title, each tab's ID, title and position, the text and elements (paragraphs, lists, tables, images) inside each tab, the tab you are viewing, and a small document property Tabquill itself adds while a long combine is in progress. Tabquill cannot open, list or read any other file in your Google Drive™ through this scope.
Permission to show its menu, sidebar and dialogs inside Google Docs (scope https://www.googleapis.com/auth/script.container.ui). This gives no access to data.
Permission to make one kind of outside request (scope https://www.googleapis.com/auth/script.external_request), used only to check a Tabquill Pro license key with Gumroad. No Google user data is included in that request, and the add-on's manifest allows no address other than api.gumroad.com.

Tabquill does not access your name, email address, profile, contacts, Gmail, Calendar, or any other file in your Drive.

How Tabquill uses Google user data

Tabquill uses the document content above for one purpose only: to carry out the command you choose, at the moment you choose it. Specifically, it reads the document in order to:

count the words in each tab and show the list of tabs in the sidebar;
open the tab you click;
build the download link for the tab you pick (see Downloads below);
copy the contents of every other tab, in order, into the tab you choose when you press Combine, adding the tab titles as headings and page breaks if you ask for them.

It then writes the result into the same document, or shows it to you in the sidebar. It does not read your document in the background, does not keep a copy of its content, and does not use it for any other purpose: no advertising, no analytics, no profiling, no credit or lending decisions, no building of user databases, and no training or improving of AI or machine-learning models (generalized or otherwise).

Downloads. A download link is Google Docs' own export address for your document and the tab you picked. Your browser opens it with your own Google sign-in, and Google sends the file straight to you. Tabquill never receives, reads or stores the downloaded file.

How Google user data is stored

Document content is not stored by Tabquill anywhere. It is processed in memory inside Google Apps Script while the command runs and discarded when it finishes. The only changes to your document are the ones you asked for.

Inside your document: while a long combine is split over several runs, a small document property records which tab is being filled and which tabs are already copied (tab IDs only, no text). It is deleted when the combine finishes or is cancelled.

Your license key, if you bought Tabquill Pro, and the date it was last checked are kept in Apps Script user properties. These are stored by Google in your own Google account; we have no access to them.

Error reports. If a command fails, Google Apps Script records the error message in our project's Google Cloud error log so we can fix bugs. These messages never contain your document text, and Google deletes them automatically after its standard log retention period (30 days).

How Google user data is shared

We do not share, sell, rent, transfer or disclose Google user data to anyone. Tabquill has no servers of ours to send it to. The only third party Tabquill contacts is Gumroad (api.gumroad.com), our payment provider, and only to confirm a Tabquill Pro license key when you activate it and about once a week after; that request contains the license key and Tabquill's product ID, never any document content or Google account data. Gumroad's own privacy policy covers your purchase and payment details, which Tabquill never sees.

Tabquill never needs your document to be shared with anyone, and never asks you to make it "anyone with the link can edit".

How we protect your data

Least privilege. Tabquill uses the narrowest Docs scope Google offers (documents.currentonly), which reaches only the document you have open, rather than access to all your documents or all of Drive. Its outside-request permission is locked by its manifest to api.gumroad.com.
No copies, no servers. All processing happens inside Google's Apps Script environment under your own account. Your document never reaches us, so there is no copy of it for us to lose or for anyone to breach.
Encryption. Data moving between Google Docs, Apps Script and Google's storage is protected by Google's infrastructure, which encrypts data in transit and at rest. The license check to Gumroad is sent only over HTTPS (TLS).
Isolation and no human access. Your license key lives in Apps Script user properties, which only your own account can read. No person at Front Porch Puzzle Press can view your documents or license key.
Secure development. Tabquill's code contains no third-party trackers or analytics libraries, its sidebar loads no remote scripts, and it is tested before each release.

Retention and deletion

Document content is never retained by Tabquill outside your document; it exists only for the moment a command runs.
Combined text stays in the tab you chose until you change it or delete the tab. Edit > Undo and File > Version history reverse any change.
A license key stays in your account's add-on storage, which only Tabquill running under your own account can read. To stop all access, uninstall Tabquill from Extensions > Add-ons > Manage add-ons, then remove its access at myaccount.google.com/permissions.
If a license key fails a check (for example after a refund), Tabquill deletes it from storage automatically.

Because we hold no copy of your data, there is normally nothing on our side to delete. You can email hello@frontporchpuzzlepress.com to ask about deletion and we will reply within 30 days.

Google API Services User Data Policy

Tabquill's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Workspace™ API data is not used to develop, improve or train generalized AI or machine-learning models.

Changes and contact

If this policy changes, the new version will be posted on this page with a new effective date. Questions or deletion requests: hello@frontporchpuzzlepress.com

Google Docs™, Google Drive™ and Google Workspace™ are trademarks of Google LLC. Tabquill is not affiliated with or endorsed by Google.