Crescelle

Privacy Policy

Last updated: August 15, 2026

What Crescelle stores, and where

• Your images, GIFs and music are read from folders you explicitly select. They are displayed and played locally in your browser and are never uploaded anywhere.
• Settings, sticky notes, to-dos, quick links, countdowns and playback position are stored locally in your browser (localStorage / IndexedDB).
• Folder access permissions use the browser's File System Access API. You can revoke them at any time in Chrome's site settings.

Permissions Crescelle asks for

• Storage — to save your settings and widgets locally.
• Geolocation — only if you open the weather widget. Your approximate coordinates are sent directly from your browser to the free weather service Open-Meteo to fetch the forecast. They are not stored by Crescelle. You can instead type a city name and never share your location.
• Identity — used only to obtain the OAuth token for the optional Google Calendar widget below. Crescelle requests no other Google scope. It does not access Google Drive.
• Google Calendar (read-only) — only if you open the Calendar widget and connect it. Crescelle requests calendar.events.readonly — events only, not your calendar list, settings or sharing details — and uses it solely to display your upcoming events on your new tab, fetched directly from Google to your browser. It cannot create, edit, or delete events, and no calendar data is stored or sent anywhere by us.

How sensitive data is protected

Google Calendar event data is treated as sensitive data. The following mechanisms apply to it, and to every other piece of data Crescelle touches.

• Encryption in transit — all requests to Google APIs are made over HTTPS (TLS 1.2 or higher), directly from your browser to Google. Crescelle operates no server, so calendar data never travels to any system we control, and there is no intermediate hop that could be intercepted.
• Encryption and isolation at rest — calendar events are never written to disk. They are held in memory only for as long as the widget renders them, and are discarded when the tab closes. The OAuth access token is the only Google-related value stored, and it is kept in chrome.storage.local, which Chrome isolates to this extension and to your operating-system user profile, protected by your device's own disk encryption.
• Access control — no person can access your calendar data through Crescelle. There is no backend, no database, no administrative console and no employee access, because none of these exist. The data is visible only in your own browser session.
• Minimum scope — Crescelle requests calendar.events.readonly, the narrowest scope that supports the feature. It grants read access to events only, not to your calendar list, settings, access-control lists or sharing details, and it cannot create, modify or delete anything.
• Retention — zero. No calendar data is retained after the tab is closed. Nothing is logged, cached to disk, backed up or exported. Crescelle's backup file explicitly excludes all Google data and the OAuth token.
• Deletion and revocation — the Calendar widget has a Disconnect button that calls Google's token revocation endpoint, ending Crescelle's access immediately and deleting the stored token from your device. You can also revoke access at any time at myaccount.google.com/permissions. Uninstalling the extension removes all local data.
• No third-party transfer — Google user data is never sold, shared, or transferred to any third party. It is never used for advertising, profiling, or credit assessment.
• No AI or ML training — Google user data obtained through Google Workspace APIs is not retained, used, or transferred to develop, improve, or train generalised or non-personalised artificial-intelligence or machine-learning models. Crescelle contains no AI or ML component of any kind.
• Code integrity — Crescelle is a Manifest V3 extension. All code is bundled in the package and reviewed by the Chrome Web Store; no remote code is downloaded or executed at runtime.

Payments

Crescelle is free. There is no payment processing, no subscription, and no billing data of any kind.

What Crescelle does NOT do

• No analytics, tracking pixels, or telemetry.
• No ads.
• No selling or sharing of data — there is no data to sell.
• No accounts, no passwords, no emails collected.

Data deletion

Everything Crescelle stores lives in your browser. Removing the extension deletes it. You can also clear individual pieces anytime via Chrome's "Clear browsing data", by revoking folder permissions, or by disconnecting your Google account from the Calendar widget.

Changes

If this policy changes, the update will be posted on this page with a new date. Material changes will be noted in the extension's changelog.

Contact

Questions? Email hello@crescelle.com.