Privacy Policy – Simple Choice Eliminator (Google Forms add‑on)

Last updated: March 17, 2026

PixoRhythm (“we”, “us”, “our”) provides the Simple Choice Eliminator Google Forms add‑on (the “Service”). This Privacy Policy explains what data we access through Google APIs, how we use and protect it, and how long we retain it.

By installing or using the add‑on, you agree to this Privacy Policy.

1. Data we access and how we use it

We only access Google user data that is strictly necessary to provide the add‑on’s functionality.

1.1 Google Forms structure and configuration

Data accessed:

  • Form metadata: form title, question titles, question IDs, item types.
  • Question options (choices) and their order.
  • Response counts per choice (aggregated counts; we do not export raw response content outside the form).
  • Add‑on configuration stored in Document Properties, for example:
    • Per‑choice limits.
    • “All choices eliminated” placeholder message.
    • Email notification on/off.
    • Internal state such as choice order and hidden choices for each question.

Purpose:

  • To show you questions and choices in the sidebar.
  • To apply per‑choice response limits.
  • To hide / restore choices when their limits are reached.
  • To show you status messages and allow you to configure behavior (e.g. placeholder message, email notification).

We do not use this data for advertising, profiling, or any purpose unrelated to providing and improving this add‑on.

1.2 Form responses

Data accessed:

  • Responses to form questions only as needed to compute per‑choice response counts within the active form.

Purpose:

  • To count how many times each choice has been selected, so we can automatically hide choices whose limit has been reached.

We do not export full response content outside the form environment. We only derive numeric counts and store configuration/derived data in Document Properties.

1.3 Google account identity and email

Data accessed:

  • Your Google account email address via Session.getEffectiveUser().getEmail().

Purpose:

  • To send optional notification emails to the form owner when all choices of a question have been eliminated (this can be turned on/off in the Config dialog).
  • To send optional onboarding or support communications if you explicitly opt‑in.

We do not share, sell, trade, or rent your email address to third parties.

1.4 Operational logs and diagnostics

Data accessed/stored:

  • We may log limited operational data using Google Cloud Logging and/or BigQuery, such as:
    • Timestamps and identifiers of add‑on function calls (e.g. sidebar opened, limits saved, Restore All used).
    • Non‑sensitive contextual information (e.g. success/failure codes).
    • In rare error scenarios, small snippets of user input necessary to diagnose the issue.

Purpose:

  • To maintain and improve the reliability and performance of the add‑on.
  • To debug errors, abuse, or unexpected behavior.

We do not log full form responses or arbitrary content for analytics or marketing.

2. Google API Services User Data Policy and Limited Use

Our use and transfer of information received from Google APIs will:

  • Adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • Only use Google user data to provide or improve user‑facing features of Simple Choice Eliminator.
  • Not use the data to build user profiles or for advertising purposes.
  • Not share Google user data with third parties except:
    • As necessary to comply with applicable law, regulation, or legal process; or
    • As part of a merger, acquisition, or asset sale, subject to equivalent or stronger privacy protections.

3. Data protection and security

We take reasonable and appropriate measures to protect your data:

Hosting and storage:

  • All code and configuration run within Google’s infrastructure (Google Apps Script and related Google Cloud services).
  • Configuration and internal state are stored in Google Form Document Properties, which are tied to the specific form.

Access control:

  • Access to logs and any backend storage is limited to authorized PixoRhythm personnel who need it to operate, maintain, or improve the add‑on.
  • We apply the principle of least privilege and use role‑based access controls in our development and operations environment.

Transport and storage security:

  • Data exchanged between your browser and Google’s servers is protected using HTTPS.
  • Data stored by Google (Forms, Document Properties, Cloud Logging, BigQuery) benefits from Google’s encryption‑at‑rest and infrastructure‑level security.

Application‑level protections:

  • We request the minimum OAuth scopes necessary to implement add‑on features.
  • We do not circumvent Google’s security model to access data outside the authorized scopes or without user consent.

4. Data retention and deletion

4.1 Form configuration and state (Document Properties)

Examples: per‑choice limits, hidden choices, choice order, no‑responses message, email notification toggle, review tracking flags.

Retention:

  • Stored for as long as the add‑on is enabled on the form and needed to provide functionality.

Deletion:

  • When you reset configuration within the add‑on (e.g. using the Reset function), we delete all add‑on–specific document properties except those explicitly documented as preserved (e.g. usage/review flags, config such as message and email toggle).
  • When you remove the add‑on from a form or revoke its access, the add‑on can no longer read or update that form’s data. You may also manually clear properties by removing and recreating the form or by contacting us (see “Your choices and rights”).

4.2 Operational logs and diagnostics

Retention:

  • Operational logs stored in Google Cloud Logging / BigQuery are retained for a limited period necessary for troubleshooting and performance monitoring (typically up to 90 days, unless a longer period is required by law or for ongoing incident investigation).

Deletion:

  • Logs are automatically deleted after the retention period expires.
  • We may aggregate and anonymize high‑level statistics (e.g. total number of add‑on activations) which no longer contain personal data and cannot be linked back to individual users or forms.

4.3 Emails

Outgoing emails sent via MailApp become normal messages in Gmail.

  • Copies of sent emails are stored in the sender’s Gmail account according to Google’s retention policies and the user’s own mailbox settings.
  • We do not store separate copies of email content outside of Google’s email infrastructure.

5. Your choices and rights

  • Google account and OAuth access: You can revoke the add‑on’s access at any time from your Google Account security settings (“Third‑party access”).
  • Form‑level data: You can remove the add‑on from a specific form, reset its configuration, or delete the form entirely.
  • Email notifications: You can enable or disable “all choices eliminated” email notifications at any time from the add‑on’s Config dialog.
  • Contact for deletion or questions: If you want us to remove any remaining add‑on–specific data we control outside of your own Google account, or if you have privacy questions, you can contact us at: [email protected].

We will make reasonable efforts to honor your request where we are the data controller and are not otherwise required to retain the data (for example, for legal or security reasons).

6. Scopes used by Simple Choice Eliminator

The add‑on requests the minimum scopes needed to operate:

  • https://www.googleapis.com/auth/forms.currentonly
    Access to the current Google Form’s structure and responses so we can read questions, choices, and compute response counts.
  • https://www.googleapis.com/auth/script.scriptapp
    Create and manage an on‑submit trigger that counts responses and hides/restores choices as limits are reached.
  • https://www.googleapis.com/auth/userinfo.email
    Read the authenticated user’s email address (e.g. to send owner notifications to the correct recipient).
  • https://www.googleapis.com/auth/gmail.send
    Send notification or welcome emails as the authorized user, such as when all choices of a question have been eliminated (this is optional and can be turned off in Config).
  • https://www.googleapis.com/auth/script.container.ui (implicitly used)
    Display the add‑on’s sidebar and dialogs inside Google Forms.

We do not request broader scopes than necessary (for example, we do not request unrestricted access to all user files or Gmail content).

7. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, when feasible, provide additional notice (for example, via the add‑on description or documentation).

Your continued use of the add‑on after any changes become effective constitutes acceptance of the revised Privacy Policy.

8. Contact

If you have any questions about this Privacy Policy or our data practices, please contact:

PixoRhythm – Simple Choice Eliminator Support
Email: [email protected]