Privacy Policy

Last updated: July 24, 2026  ·  Developer: CloudNetix  ·  support@cloudnetix.de

1. About Format Rules Manager

Format Rules Manager is a free Google Sheets add-on developed by CloudNetix. It lists every conditional formatting rule in the currently active spreadsheet across all tabs, and lets you delete, duplicate, reorder, copy, merge, export, and import those rules, with per-tab undo. All processing runs on Google Apps Script and Google Cloud infrastructure. No spreadsheet content is sent to CloudNetix-controlled servers.

This Privacy Policy describes what Google user data the add-on accesses, how it is used, how long it is retained, and how you can delete it.

2. Data Access

Format Rules Manager accesses Google user data solely to provide its rule-management functionality. All data is accessed through Google APIs using the minimum required OAuth scopes — exactly two.

Scope-to-feature mapping:

OAuth Scope	What it permits	How Format Rules Manager uses it
spreadsheets.currentonly	Read and write access to the currently active spreadsheet only	Reads conditional formatting rules (ranges, conditions including custom formula text, colors, and color-scale settings), sheet names, sheet visibility, grid sizes, sheet protections, and the spreadsheet's timezone and theme, to build the rule inventory; writes conditional formatting rules back to the same spreadsheet when you delete, duplicate, reorder, copy, merge, import, or undo; stores undo snapshots in the spreadsheet's document properties.
script.container.ui	Display UI elements (sidebar, dialogs) inside Google Sheets	Displays the add-on sidebar with the rule inventory, modals, and menus inside the Google Sheets interface.

Format Rules Manager requests no Google Drive access and cannot see, create, or modify any file other than the spreadsheet it is opened in.

Google Sheets data read:

• For each tab: sheet name, sheet ID, position, hidden status, grid size (rows and columns), and sheet/range protections (checked before any change is written)
• For each conditional formatting rule: the ranges it applies to, the condition (type and values, including custom formula text and dates), formatting (bold, italic, strikethrough, underline, text color, background color), and color-scale settings
• The spreadsheet's timezone (used to represent date conditions correctly) and theme colors (used to display theme-based rule colors accurately)
• All data is read from the currently active spreadsheet only. The add-on cannot access any other spreadsheet.

Google Sheets data written:

• Conditional formatting rules on the tabs you change — and nothing else. The add-on never modifies cell values, cell formatting outside conditional formatting rules, or spreadsheet structure.
• Writes happen only when you explicitly trigger an operation (delete, duplicate, reorder, copy, merge, import, undo, or a cleanup action).

Undo snapshots stored in document properties:

• Before each change, the add-on saves a snapshot of the affected tabs' conditional formatting rules — serialized rule data including custom formula text — in the spreadsheet's own document properties, so the change can be undone.
• These snapshots never leave your Google account. They are part of the spreadsheet's stored properties and are visible to other editors of the same spreadsheet who use the add-on (this is what makes shared undo possible).
• Each tab keeps the snapshot of its most recent change; older snapshots are replaced as new changes are made, and the store is size-limited.
• You can delete all snapshots at any time with the Clear undo history button (in the sidebar's menu and in the About dialog). Snapshots older than 7 days are also purged automatically the next time the add-on is used.
• Uninstalling the add-on does not remove snapshots already stored in a spreadsheet's document properties — use Clear undo history before uninstalling if you want them removed.

Add-on configuration stored in user properties:

• collapsedSheets — which tabs you have collapsed in the sidebar list
• welcomeDismissed — whether you have dismissed the one-time welcome banner
• Stored in Google Apps Script user properties, scoped to the user and the script. These values describe interface state only and contain no spreadsheet content.

3. Data Usage

This section uses Google's verbatim recommended Limited Use compliance statement and mirrors the Limited Use clauses of both the Google API Services User Data Policy and the Google Workspace API Services User Data and Developer Policy, so the disclosures match Google's published policy text.

Appropriate use case: Format Rules Manager is a productivity application that handles spreadsheet data only via the application's user interface, at the user's request. This matches Google's approved use case for productivity applications.

Purposes for which Google user data is used:

Google user data accessed by Format Rules Manager is used exclusively to provide the user-facing features that are visible and prominent in the add-on's sidebar interface, namely:

• Listing the conditional formatting rules of the active spreadsheet across all tabs, with accurate colors and readable summaries
• Carrying out the rule operations you explicitly trigger: delete, duplicate, reorder, copy to other tabs, merge duplicates, export, import, and undo
• Saving undo snapshots of the tabs you change, in the spreadsheet's own document properties, so changes can be reverted
• Remembering your sidebar interface state (collapsed tabs, dismissed welcome banner) between sessions
• Diagnosing errors using technical metadata only — no spreadsheet content or user identifiers are recorded

Limited Use commitments:

Format Rules Manager:

1. Limits its use of data to providing or improving the appropriate use case and user-facing features that are visible and prominent in the requesting application's user interface.
2. Does not transfer Google user data to any third party, except: (a) to provide or improve the appropriate use case or user-facing features visible and prominent in the application's user interface and only with the user's consent (the only movements of rule data are user-initiated — the JSON export you copy to your clipboard, and undo snapshots written to the spreadsheet's own document properties — both of which remain under your control); (b) for security purposes (for example, investigating abuse); (c) to comply with applicable laws and/or regulations; or (d) as part of a merger, acquisition, or sale of assets of the developer after obtaining explicit prior consent from the user.
3. Does not allow humans (CloudNetix staff, contractors, or any third party) to read Google user data, unless: (a) we have obtained and documented the user's explicit consent to read specific data; (b) the data (including derivations) is aggregated and anonymised and used for internal operations in accordance with applicable privacy laws; (c) it is necessary for security purposes (for example, investigating abuse); or (d) to comply with applicable laws and/or regulations.
4. Does not transfer or sell Google user data to third parties such as advertising platforms, data brokers, or information resellers.
5. Does not transfer, sell, or use Google user data for serving ads, including retargeting, personalised or interest-based advertising.
6. Does not transfer, sell, or use Google user data to determine credit-worthiness or for lending purposes.
7. Does not transfer, sell, or use Google user data to create, train, or improve any machine learning or artificial intelligence model. Format Rules Manager does not incorporate AI or ML functionality of any kind. (See Section 7 for full AI/ML disclosure.)

Processing location:

Spreadsheet content is processed in memory by Google Apps Script while the sidebar is in use and is not sent to any non-Google server. Everything the add-on stores — undo snapshots in the spreadsheet's document properties and interface settings in user properties — remains inside Google's infrastructure, under your Google account's access controls. Format Rules Manager does not access any spreadsheet other than the one currently active when you use it. Format Rules Manager does not scrape Google user data, build databases from it, or create permanent copies of it on CloudNetix-controlled systems.

4. Data Sharing

Format Rules Manager does not sell, rent, or share Google user data with any third party. There are no third-party sub-processors of Google user data. All processing occurs within Google's infrastructure:

• Spreadsheet content is processed in memory by Google Apps Script and never leaves Google's infrastructure.
• Undo snapshots are stored in the spreadsheet's own document properties — inside your Google account. They are visible to other editors of the same spreadsheet who use the add-on, because the properties belong to the shared spreadsheet (see Section 2).
• Operational logs are stored in Google Cloud Logging under CloudNetix's Google Cloud Platform project. These logs contain only technical metadata: event name, timestamp, operation identifier, execution context (such as operation type, sheet count, rule count, durations), and — for errors — error type, error message, stack trace, and a temporary support code. They never contain spreadsheet content, rule contents, formulas, email addresses, or Google account identifiers.

5. Data Storage & Protection

Format Rules Manager treats all user data securely in transit and at rest, in line with the security requirements of the Google Workspace API Services User Data and Developer Policy.

Format Rules Manager operates no external servers, databases, or object storage. All storage occurs within Google's infrastructure:

• Undo snapshots are stored in the spreadsheet's document properties (PropertiesService.getDocumentProperties()), which belong to the spreadsheet and are governed by the spreadsheet's own sharing and access controls.
• Per-user interface settings are stored in Google Apps Script user properties (PropertiesService.getUserProperties()), scoped to the user and the script, accessible only by the add-on.
• Operational logs are stored in Google Cloud Logging under CloudNetix's Google Cloud Platform project (project ID format-rules-manager), protected by Google Cloud IAM access controls. Access to these logs is restricted to Maher Mahouachi (CloudNetix's developer and operator), and is used only to diagnose errors and operational issues. Logs are retained for up to 30 days.

Transport and at-rest protection:

• All communication between the user's browser, Google Apps Script, Google Sheets, and Google Cloud Logging uses HTTPS (TLS), as enforced by Google's infrastructure.
• Document properties and user properties stored via Google Apps Script are encrypted at rest by Google.
• Operational logs stored in Google Cloud Logging are encrypted at rest by Google.
• Format Rules Manager does not maintain any OAuth access tokens or refresh tokens of its own — all authorisation flows are handled by Google Apps Script and Google's OAuth system. There are no credentials, tokens, or keys stored outside Google's systems.

Marketing website hosting:

The public marketing website at format-rules-manager.cloudnetix.de (containing this Privacy Policy, the Terms of Service, and product information) is served by Cloudflare Pages over HTTPS. The website does not receive, transmit, or process any Google user data. Cloudflare functions only as the static-site host for marketing pages, and is not a subprocessor of Google user data.

6. Data Retention & Deletion

Retention:

• Undo snapshots — each tab keeps the snapshot of its most recent change; older snapshots are replaced as new changes are made. Snapshots older than 7 days are purged automatically on next use. All snapshots can be deleted at any time with Clear undo history.
• Per-user interface settings — retained in Google Apps Script user properties while you use the add-on.
• Operational logs — retained for up to 30 days in Google Cloud Logging, then automatically deleted.

How to delete your data:

Format Rules Manager provides a clear deletion path for each category of data. The procedures below cover everything Format Rules Manager interacts with.

How to delete undo snapshots

Undo snapshots live in the spreadsheet's own document properties:

• Clear undo history (recommended): open the Format Rules Manager sidebar in the spreadsheet, open the sidebar menu (or the About dialog), and click Clear undo history. This deletes every snapshot the add-on has stored in that spreadsheet.
• Automatic expiry: snapshots older than 7 days are purged automatically the next time the add-on is used in that spreadsheet, and older snapshots are replaced as new changes are made.

Important: because snapshots are stored in the spreadsheet's document properties, uninstalling the add-on does not delete them. If you want all snapshots removed, use Clear undo history in each spreadsheet before uninstalling. If you need help, contact support@cloudnetix.de.

How to delete your add-on settings

The stored settings are limited to interface state — which tabs you collapsed in the sidebar and whether you dismissed the welcome banner. They contain no spreadsheet content. They are stored in Google Apps Script user properties tied to your own Google account:

• Uninstall: uninstall Format Rules Manager from Google Sheets. This removes the add-on's authorisation; afterwards it can no longer read or write any settings tied to your account.

For technical context: Apps Script user properties are scoped to (user, script) and are only accessible during your own execution of the add-on. If you ever need help with deletion, contact support@cloudnetix.de and we will guide you through the steps.

How to delete exported JSON files

JSON exports are created on your screen for you to copy — the add-on does not save them anywhere. If you paste an export into a file or document of your own, that copy is under your control like any other file you create, and can be deleted the same way.

How to request deletion of operational log entries

Operational logs are stored in CloudNetix's Google Cloud Logging project (format-rules-manager). To respect your privacy, the only identifier attached to a log entry is a temporary support code generated by Google Apps Script (Session.getTemporaryActiveUserKey()). Per Google's documentation, this support code is anonymous (it does not reveal your identity), unique to your user-script pair within Format Rules Manager, and rotates periodically.

To request deletion of log entries that may relate to you:

1. Locate the support code shown by the add-on at the time of the error you want deleted.
2. Email that support code (and, ideally, the approximate date and time of the error) to support@cloudnetix.de.
3. CloudNetix will delete the matching log entries, provided the support code has not yet rotated (typically rotation occurs within a few weeks).

If you do not have a support code (no error occurred, or your support code has rotated since the error), CloudNetix is happy to assist — please contact us with whatever details you have. Note that because logs contain no email address, Google account ID, or other personal identifier, locating specific entries without a support code may not be technically possible. In all cases, all operational logs are automatically deleted after 30 days, after which no log data exists.

For any other data-related question, contact support@cloudnetix.de.

7. Artificial Intelligence and Machine Learning

This section mirrors the AI/ML clause of the Google Workspace API Services User Data and Developer Policy, which prohibits "transferring, selling, or using user data to create, train, or improve a machine learning or artificial intelligence model beyond that specific user's personalized model for the appropriate use case or user-facing feature."

Format Rules Manager does not transfer, sell, or use Google user data — including conditional formatting rules, custom formula text, cell ranges, sheet metadata, or any other data obtained from Google Workspace APIs — to create, train, or improve any machine learning or artificial intelligence model.

This commitment applies without exception. Format Rules Manager does not incorporate any AI or machine-learning functionality. All analysis — including duplicate detection and cleanup suggestions — is deterministic and rule-based, performed by Google Apps Script while you use the sidebar. There is no personalised AI/ML model, generalised AI/ML model, or any other AI/ML use of Google user data, whether by CloudNetix, by a third party, or by any subprocessor.

Format Rules Manager does not retain Google user data for any AI or ML training purpose. Rule data read while the sidebar is open is processed in memory by Google Apps Script; the only stored copies are the undo snapshots and any JSON exports you choose to keep — both of which remain in your own control.

8. Prohibited Uses

Format Rules Manager explicitly does not:

• Sell, rent, transfer, or broker Google user data to any third party
• Use Google user data for targeted advertising, interest-based advertising, or user profiling
• Build or contribute to any database of users or user data derived from Google APIs
• Use spreadsheet content, rule data, or any Google user data to train AI or ML models
• Store, cache, or transmit spreadsheet content outside of Google's infrastructure
• Collect or store email addresses or Google account identifiers
• Access any spreadsheet other than the one currently active when the add-on runs
• Access Google Drive, or any file other than the spreadsheet it is opened in

9. Logging and Support Diagnostics

Format Rules Manager does not log spreadsheet content, conditional formatting rule contents, custom formula text, cell values, email addresses, or Google account identifiers.

When an operation runs or an error occurs, the add-on may record only the following technical metadata in CloudNetix's Google Cloud Logging project: event name, timestamp, operation identifier (a per-operation UUID), execution context (such as operation type, sheet count, rule count, durations), and — for errors — error type, error message, stack trace containing only script function names and line numbers, and a temporary support code.

About the support code: The support code is generated by Session.getTemporaryActiveUserKey(). Per Google's documentation, this key:

• Is unique to the user within Format Rules Manager
• Does not reveal the user's identity
• Rotates periodically

The support code is shown to the user only when an error occurs (so you can include it in a support email). CloudNetix uses it solely to locate the matching log entry when you contact support. Because the code is anonymous and rotates, CloudNetix has no way to associate logs with a specific user without it.

10. Your Choices

You control every change the add-on makes — nothing is written without an explicit action from you. You can delete all undo snapshots at any time with Clear undo history, and you can stop using the add-on or uninstall it at any time. See Section 6 for the full deletion procedure per data category. For any other data-related requests, contact support@cloudnetix.de.

11. Lawful Basis and Your Rights (EU/UK Users)

Data controller

The data controller for personal data processed by Format Rules Manager is:

• Maher Mahouachi (operating under the trading name CloudNetix)
• Braunschweig, Germany
• Email: support@cloudnetix.de

For the full statutory contact address and other legal disclosures, see our Impressum.

If you are located in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) grants you certain rights. Users located in the United Kingdom enjoy equivalent rights under the UK GDPR and the Data Protection Act 2018.

Lawful basis for processing (GDPR Article 6)

CloudNetix processes Google user data on the following lawful bases:

• Article 6(1)(a) — consent: when you install Format Rules Manager, authorise the OAuth scopes, and use the sidebar, you give explicit consent for the add-on to access the Google user data listed in Section 2. You may withdraw your consent at any time by uninstalling Format Rules Manager from Google Sheets (Extensions → Add-ons → Manage add-ons). Withdrawal stops future processing; data already stored follows the retention and deletion procedures described in Section 6.
• Article 6(1)(f) — legitimate interests: CloudNetix has a legitimate interest in recording minimal technical metadata (event name, timestamp, operation identifier, execution context, error type, error message, and an anonymous support code) for the purpose of detecting and resolving operational errors. This interest is balanced against your privacy by being narrow in scope, excluding spreadsheet content and direct user identifiers, and subject to automatic deletion after 30 days.

Your data protection rights

You have the following rights under the GDPR (and equivalent rights under the UK GDPR). Where Format Rules Manager already supports a right through its design, the existing mechanism is noted; for any other request contact support@cloudnetix.de.

• Right of access (Article 15): you have the right to obtain confirmation of whether personal data about you is processed and, if so, a copy of that data. Your undo snapshots and settings are stored in your own Google account and are visible through the add-on itself. You can also email support@cloudnetix.de at any time to request confirmation of what (if any) personal data CloudNetix holds about you, including any operational log entries identifiable by support code.
• Right to rectification (Article 16): the add-on stores no profile data about you; interface settings update themselves as you use the sidebar.
• Right to erasure (Article 17): see Section 6 for the deletion procedure for each data category.
• Right to restrict processing (Article 18): you decide which operations run; you can stop using the add-on at any time.
• Right to data portability (Article 20): the add-on's own JSON export gives you a portable, machine-readable copy of your conditional formatting rules at any time.
• Right to object (Article 21): you have the right to object, on grounds relating to your particular situation, to processing of operational metadata carried out under Article 6(1)(f) (legitimate interests) for error diagnosis. To exercise this right, email support@cloudnetix.de. You can also stop all processing immediately by uninstalling Format Rules Manager.
• Right to withdraw consent (Article 7(3)): you may withdraw your consent at any time by uninstalling Format Rules Manager. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority for the data controller (operating from Lower Saxony, Germany) is:

• Der Landesbeauftragte für den Datenschutz Niedersachsen
• Postal address: Postfach 221, 30002 Hannover, Germany
• Visitor address: Prinzenstraße 5, 30159 Hannover, Germany
• Telephone: 0511 120-4500
• Email: poststelle@lfd.niedersachsen.de
• Website: www.lfd.niedersachsen.de

You may also lodge a complaint with the supervisory authority of the EEA member state where you reside or where the alleged infringement occurred. A list of EEA supervisory authorities is published by the European Data Protection Board at edpb.europa.eu. Users in the United Kingdom may lodge a complaint with the Information Commissioner's Office (ico.org.uk).

Personal data breach notification

If a personal data breach occurs in relation to Format Rules Manager, CloudNetix will comply with its notification obligations under Articles 33 and 34 of the GDPR, including notification to the competent supervisory authority and, where applicable, to affected users.

International data transfers

All Google user data processed by Format Rules Manager remains within Google's own infrastructure. Format Rules Manager does not initiate any transfer of Google user data outside Google's infrastructure. Any cross-border data transfer that may occur as part of Google's operation of its services is governed by Google's own privacy and data-transfer policies, published at policies.google.com/privacy.

Automated decision-making

Format Rules Manager performs automated rule-based analysis of your spreadsheet's conditional formatting (for example, detecting identical rules). This processing does not produce legal effects concerning you and does not constitute automated decision-making within the meaning of Article 22 GDPR. No profiling is performed.

Children

Format Rules Manager is intended for adult professional and educational use. The add-on is not directed at children under 16, and CloudNetix does not knowingly collect or process personal data from children under 16. If you become aware that a child under 16 has used Format Rules Manager, please contact support@cloudnetix.de. CloudNetix will delete any associated data within its control and will provide guidance for deleting any data held in the user's own Google account.

12. Cookies on the Marketing Website

The Format Rules Manager add-on (the sidebar inside Google Sheets) does not set or read any cookies on your device. The disclosures below relate solely to the public marketing website at format-rules-manager.cloudnetix.de.

The marketing website is hosted on Cloudflare Pages. Depending on your browser, your network, and which Cloudflare features are active during your visit, Cloudflare may set one or more cookies that Cloudflare describes as necessary to operate its security and content-delivery services. The two cookies most likely to appear in connection with this site are:

• __cf_bm — set by Cloudflare to support its Bot Management and Bot Fight Mode services. Per Cloudflare's documentation, this cookie expires after 30 minutes of continuous inactivity by the end user.
• cf_clearance — set by Cloudflare only after a security challenge has been solved. It stores proof that the challenge was passed.

Cloudflare may also set additional cookies in connection with specific security, rate-limiting, or always-online features. Cloudflare publishes the complete and current list (with purposes and lifetimes) in its Cloudflare cookies reference.

You can check which cookies, if any, are currently set on your device by opening your browser's developer tools (Application → Cookies) while viewing the marketing website.

These cookies are described by Cloudflare as necessary to operate its security and content-delivery services. They are not used for analytics, advertising, behavioural profiling, or cross-site tracking. The marketing website does not load Google Analytics, Google Tag Manager, advertising pixels, social-media trackers, or any other third-party analytics or marketing scripts.

You can clear or block cookies at any time through your browser settings. Doing so may affect the security checks performed by Cloudflare on the marketing website but will not affect your use of the Format Rules Manager add-on inside Google Sheets.

This disclosure is provided in line with § 25 TDDDG, the EU ePrivacy Directive, and Article 13 of the GDPR.

13. Changes To This Policy

This Privacy Policy may be updated from time to time. The latest version will always be published at this URL.

14. Contact

For questions about this Privacy Policy, contact support@cloudnetix.de.