Data & Privacy

Your files stay yours

ShortieCuts works inside Google Sheets, Docs and Slides, so it's fair to ask what it can see. The short answer: the shortcuts run on your own computer, and we never receive the contents of your files.

Last updated: October 11, 2026

What we never see

What's in your files: cell values, formulas, text, comments, charts or images.
File names, document titles or document links.
Who you share your files with.
Your Google password. Sign-in happens on Google's own screen.
Your card number. Stripe handles payments and never shows it to us.

How can a shortcut work without seeing my sheet? The extension works the way you do. It reads what's on your screen and clicks Google's own menus for you. A few features read cells locally to do their job, such as Trace Formulas reading the selected formula or Goal Seek reading the cells you pick. That happens inside your browser and is never sent to us.

What we do collect

Your Google account basics. Email address, name and profile photo, when you sign in to start a trial or subscribe.
Your plan. Trial dates, whether Pro is active, monthly or yearly, and a Stripe customer number. Also any "extra email" you add, and referral credits if you invite friends (friends appear masked, like j***@gmail.com).
Shortcut usage counts. When a shortcut runs, we log its menu name (for example "Home > Font > Bold" or "goalseek/open") and the app (Sheets, Docs or Slides). We also log when a reminder appears and which button was clicked, and which letter was pressed when a key-tip doesn't exist. These are tied to a random account number, not your email.
Team plans. The admin's email, the member emails or company domain the admin adds, and a log of who was added or removed.
Uninstall survey. The reasons you tick, any comment you type, and the extension version. It isn't linked to your account.
Website visits. The usual analytics: pages viewed, browser and device, rough location from your IP address, and cookies.
Emails you send us.

Your settings (key-tip position, on/off) and a small reminder counter are saved in Chrome on your computer, not with us.

Why

To run your account and check whether Pro is active.
To bill you, through Stripe.
To see which shortcuts people use, fix the broken ones and decide what to build next.
To measure our ads and credit referrals and affiliates.
To answer your emails.

We don't sell your personal data.

Who else touches it

Google Firebase (Google Cloud): sign-in, our account database, our server code and this website.
Google Analytics: usage counts for the extension and the website.
Google Tag Manager: loads the analytics and ad tags on our website.
Stripe: payments, invoices and the billing portal. Stripe gets your email and name when you first sign in, so your billing record is ready, plus your card details if you subscribe.
Hotjar: website heatmaps and visit recordings, plus the red survey bubble on our site.
Google Ads, Meta (Facebook) and Reddit: ad measurement tags on our website.
Rewardful: our affiliate program. Gets your email when you subscribe, so the right affiliate gets credit.

One thing worth knowing. To count shortcut use, the extension loads a small hidden page from shortiecuts.com inside your Sheets, Docs or Slides tab. That page runs Google Analytics and nothing else: no ad, Meta, Reddit, Hotjar or affiliate tags. Google Analytics can see that you have a Google Sheets, Docs or Slides tab open (only the site name, docs.google.com, never the document link), the shortcut names you use, and normal browser details like your IP address and cookies. It can't see into your document, because browsers keep the two pages separate.

Deleting your data

Uninstall anytime. Chrome removes the extension's saved settings with it.
Cancel first if you subscribe. Open the ShortieCuts popup, click Settings, then Manage next to Billing.
Delete your account. Email info@shortiecuts.com from the address you signed in with. We delete your account and sign-in records and ask Stripe to delete your customer record. We keep only what the law requires, such as invoices.
Usage counts aren't stored under your name or email, and Google Analytics deletes them after a set period.

The Privacy Policy has the formal version, including your rights under GDPR and California law.

Check it yourself

You don't have to take our word for it. Here's every web address the extension talks to, and how to watch it happen.

Every address the extension contacts

Inside your Sheets, Docs or Slides tab

shortiecuts.com/tracking and www.shortiecuts.com/tracking: the hidden usage-count page.
Google Analytics, the only tag that page loads: www.googletagmanager.com/gtag/js (the Google Analytics script) and google-analytics.com / analytics.google.com (where the counts go).

From the extension's background and popup

us-central1-alt-shortcuts-for.cloudfunctions.net: our account server (start trial, subscribe, billing, referrals).
firestore.googleapis.com: your account record (plan and trial status).
identitytoolkit.googleapis.com and securetoken.googleapis.com: Firebase sign-in.
accounts.google.com: Google sign-in and sign-out.
www.google-analytics.com: usage counts (reminders shown, unknown key-tips).
lh3.googleusercontent.com: your Google profile photo in the popup.

Pages it opens in a new tab

www.shortiecuts.com: welcome page, trial page and the uninstall survey.
checkout.stripe.com and billing.stripe.com: checkout and billing portal.
chromewebstore.google.com: only if you click to leave a review.

Everything else you'll see in a Google Sheets tab (google.com, gstatic.com, googleapis.com, googleusercontent.com, play.google.com) is Google Sheets itself.

Watch it in Chrome

Open any Google Sheet.
Open Chrome's developer tools: press Cmd+Option+I on a Mac, or Ctrl+Shift+I on Windows.
Click the Network tab, tick Preserve log, then reload the page.
Use a few ShortieCuts shortcuts.
Type shortiecuts in the Filter box. You'll see the hidden tracking page. Click it, open Headers, and check that the Referer is just https://docs.google.com/, with no document link.
Now type collect in the filter. Click a request and open Payload. You'll see the event name run_shortcut and the shortcut's name, and nothing from your sheet.
To watch the background calls, go to chrome://extensions, switch on Developer mode (top right), find ShortieCuts and click service worker. A second developer tools window opens; use its Network tab the same way.

The permissions Chrome shows

"Read and change your data on docs.google.com and www.shortiecuts.com." Needed so the extension can show key-tips and click Google's menus when you press keys. It only runs on Sheets, Docs and Slides pages, and on our own website.
Identity (Google sign-in). Lets you sign in with Google. When you do, Google asks you to share your email address and basic profile, and nothing else from your Google account.
Storage. Saves your settings in Chrome.

The extension doesn't ask for access to every website, your browsing history, your tabs or your Google Drive.

Questions? Email info@shortiecuts.com.