Privacy Policy
For the Google Sheets add-on Compare Two Sheets — Lambda Tools. Last updated 14 August 2026.
The short version. The add-on reads the two sheets you pick, writes a report into a new sheet in the same spreadsheet, and stops. Your spreadsheet content is never sent to us or to anyone else — we have no server and no database to send it to. The add-on makes exactly one outbound request, and it carries your licence key and nothing else.
We do not ask for your email address, we do not use analytics, and there is nothing to opt out of.
Who is responsible
TODO-LEGAL-ENTITY is the data controller for this add-on. You can reach us at support@lambdabit.dev about anything on this page, including a request to see or delete what we hold.
Your spreadsheet content
When you run a comparison, the add-on reads the two sheets you selected and writes a report sheet into the spreadsheet you are working in. All of that happens inside Google's Apps Script runtime, on Google's infrastructure, under your own Google account.
Spreadsheet content is never transmitted to us, never stored outside your Google account, and never shared with a third party. This is a structural fact rather than a promise about our intentions: the add-on has no backend. There is no server, no database and no logging pipeline that could receive it.
Neither of the sheets you compare is written to. Results go into a separate report sheet, which is reused rather than duplicated when you run the same comparison again.
Your licence key
When you paste a licence key into the add-on, two things happen.
It is stored in Apps Script's UserProperties — Google-hosted
storage scoped to your Google account and to this add-on alone. Alongside it we store the
entitlements the key resolved to, the time of the last check, and the text of the last
error if one occurred. Nothing else is stored, and none of it is visible to us.
It is sent to Polar, our licensing and payment provider, to be validated. That request is the only outbound connection this add-on ever makes. It carries exactly two values:
- the licence key you pasted;
- our own organisation identifier, which is the same for every customer.
It does not carry your email address, your Google identity, the name of your spreadsheet, or any part of its contents. Polar's handling of the request is covered by Polar's privacy policy.
The licence key is not tied to a Google identity. That is deliberate — in a browser signed into several accounts, identity checks routinely pick the wrong one and lock out people who have paid — and it has the side effect that we cannot connect a running installation of the add-on to a person.
What we do not collect
- Your email address. The add-on does not request the
userinfo.emailpermission, so it cannot read it even accidentally. An automated test fails the build if that permission is ever added. - Usage analytics. There is no telemetry, no event tracking and no measurement of any kind. We do not know how often you run a comparison, or whether you ever have.
- Cookies. The add-on sets none. This website sets none either — it is static HTML with no third-party scripts, no fonts loaded from elsewhere and no embedded trackers.
Error logs
One honest exception to the above. If the add-on hits an unhandled error, Apps Script writes a stack trace to Google Cloud Logging under the add-on's own Google Cloud project, which we can read. A stack trace names the code that failed, but an error message can incidentally include a value that caused it — a sheet name, or a cell value that could not be parsed. We do not go looking for these, they are not indexed against you, and Google Cloud Logging deletes them on its default retention schedule (30 days). We use them only to diagnose faults.
Purchases
Payments are handled by Polar as merchant of record. Polar, not us, collects the name, email address, billing address and payment details needed to take the payment and issue a VAT-compliant invoice. We never see your card details.
We can see the resulting order and customer records — your name, email address, country and what you bought — in Polar's dashboard, and we use them to provide support, to re-send a lost licence key, and to meet our own invoicing and tax-record obligations. Polar retains this data under its own policy and its own legal obligations; EU invoicing rules require records to be kept for several years, so a purchase record outlives a refund.
Google permissions, and why each one is asked for
The add-on requests four permissions. This is the complete list — it is taken from the add-on's manifest, which is what Google enforces at runtime.
| Permission | What it is for |
|---|---|
.../auth/spreadsheets |
Open the two sheets you chose and write the report sheet. This is the permission Google's consent screen words as access to your spreadsheets. There is no narrower permission that can open a spreadsheet you select, which is the whole function of the add-on. |
.../auth/drive.file |
Run the standard Google file picker, so that you can choose a second spreadsheet by clicking it rather than by pasting a URL. It grants access only to files you pick, one at a time. |
.../auth/script.external_request |
Make the one outbound request described above — validating your licence key with Polar. It is used for nothing else. |
.../auth/script.container.ui |
Draw the menu item and the dialogs inside the spreadsheet. |
Scroll the table sideways to see the full scope names →
Google API Services User Data Policy
Compare Two Sheets — Lambda Tools' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data obtained through these permissions is used only to provide the comparison feature you asked for, is not transferred to anyone except as necessary to provide it, is not used for advertising, and is not read by any human except with your explicit consent for support purposes or as required by law.
How long anything is kept, and how to delete it
- Licence key and entitlements. Kept in your Google account until you remove them. Open My Licence in the add-on and click Remove licence; that deletes the key, the cached entitlements and the stored timestamp immediately. Uninstalling the add-on removes them too, and revokes every permission above.
- Spreadsheet content. Nothing is retained, because nothing is collected. The report sheet is yours, in your file — delete it like any other sheet.
- Error logs. 30 days, then deleted by Google.
- Purchase records. Held by Polar under its retention policy and the statutory retention periods for invoices.
Your rights
Under the GDPR you have the right to access, correct, erase, restrict, port and object to the processing of your personal data, and to complain to a supervisory authority — in Romania, the ANSPDCP.
In practice the only personal data associated with you is your purchase record. Email support@lambdabit.dev and we will action it, or tell you plainly if a statutory retention period prevents deletion of an invoice.
Children
This add-on is a business tool and is not directed at children under 16. We do not knowingly collect data from them.
Changes to this policy
If this policy changes materially — if the add-on starts collecting something it does not collect today, or sends something somewhere new — the change will be posted here with a new date above, before the version that makes the change is released.