Last updated: August 9, 2026
This Privacy Policy explains how the Timeline Tool application ("we", "us", or "our"), available at
https://baabullah.my.id/tools/timeline/, collects, uses, and protects
information when you use our web application to turn spreadsheets into Gantt charts.
Short version: You can use the free CSV/paste features without an account. If you sign in with Google or
connect a Google Sheet, we store the minimum data needed to render and keep your charts in sync. We never sell your data.
1. Information we collect
- Google account information — when you sign in with Google, we receive your name, email address, and profile
picture so we can show your account and associate your saved spreadsheets with you.
- Google Sheets data you connect — spreadsheet IDs, tab names, and the row data from the tabs you choose to
connect or snapshot. This data is used to render your Gantt chart, power auto-refresh, and store version snapshots you create.
- Preferences and usage — your selected theme, the active spreadsheet you last used (kept locally in your
browser), and basic anonymized usage logs to keep the service reliable.
- Purchase and license information — the premium plan you chose, your license key, and a payment reference
number. Payments are processed by PayPal; we never
see or store your credit card details.
- Device identifiers — a device ID is recorded when you activate a lifetime license, to enforce the
device limit of the license.
2. How we use your information
- To render and display your Gantt chart and project summary.
- To let you connect, list, refresh, and snapshot your Google Sheets spreadsheets.
- To manage your account, premium subscription, and license keys.
- To improve the application and provide support.
3. Google API services
When you connect a Google Sheet, our use of information received from Google APIs follows the
Google API Services
User Data Policy. We only request the scopes needed to sign you in and to read the spreadsheets you explicitly choose. Your
data is used solely to provide the features you requested and is never used for advertising, sold, or transferred to
advertising platforms. Google's own privacy practices are described in
Google's Privacy Policy.
4. Where data is stored
Data you save (connected spreadsheets, snapshots, preferences, and license records) is stored on our web server in a
database. Data you upload as CSV or paste is processed in your browser and is not stored on our servers unless you save it
through a premium feature.
5. Data protection mechanisms
We implement the following measures to protect sensitive data — including your account details, the contents of the Google
Sheets you connect, and your credentials — against unauthorized access, disclosure, alteration, and loss:
- Encryption in transit — all communication between your browser and our servers, and between our servers and
Google APIs, is encrypted with TLS/HTTPS. Credentials and access tokens are never transmitted in plain text.
- Encryption at rest — data stored on our servers (connected spreadsheet references, snapshots, preferences,
and license records) resides on encrypted storage volumes, and Google OAuth tokens are encrypted before storage.
- Authentication and access control — access to your data requires sign-in through Google (OAuth 2.0), and you
can only view, modify, or delete your own data. Tokens are scoped only to the spreadsheets you explicitly choose, and we apply
the principle of least privilege internally.
- Credential protection — we never store your Google password or payment card details. Payments are processed
entirely by PayPal. OAuth tokens are stored with restricted access and used only to provide the features you request.
- Limited internal access — access to production data is restricted to the minimum personnel required to
operate and maintain the service and occurs only over secure channels. We do not read your spreadsheet contents except to
provide the features you request or to troubleshoot with your consent.
- Retention and deletion — connected spreadsheet data, snapshots, and preferences are retained only while your
account is active or until you ask us to delete them. On account deletion or disconnection, we remove your stored data from
active systems in accordance with applicable law.
- Monitoring and breach response — we monitor our systems for unauthorized activity and maintain procedures to
respond to, contain, and notify affected users of any data security incident as required by law.
- No advertising, sale, or transfer — we do not use your data for advertising and we do not sell or transfer
your personal or spreadsheet data to third parties, consistent with the Google API Services User Data Policy.
6. Sharing of information
We do not sell or rent your personal information. We share data only with the service providers required to run the
application: our hosting provider, Google (for sign-in and Sheets access), and PayPal (for payment processing). Each is bound to
use the data only to provide its service.
7. Cookies and local storage
We use browser local storage to remember your theme preference and the spreadsheet you last used. We do not use third-party
advertising cookies. You can clear this data at any time from your browser settings.
8. Your choices and rights
- Disconnect — you can remove a connected spreadsheet at any time from the app.
- Access and correction — you can see your account and saved data by signing in.
- Deletion — contact us to request deletion of your account and all associated data.
9. Children's privacy
The application is not directed to children under 13, and we do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy from time to time. The current version is always available at this URL, with the "last updated" date
shown above.
11. Contact us
Questions about this policy or your data? Contact us at
baabullah@gmail.com.