IconFill: Insert Icons in Slides™, Docs™, Sheets™ — Privacy Policy

Last updated: 25 October 2026

IconFill is an add-on for Google Slides™, Google Docs™ and Google Sheets™ that inserts icons into the file you open it in. This policy says what it does with data, including the Google user data it receives.

What Google user data IconFill accesses

• The file you use it in (scopes presentations.currentonly, documents.currentonly and spreadsheets.currentonly, one for each editor). IconFill reads only where the icon should go: the current slide, the cursor in a document, or the selected cell in a spreadsheet, and whether that cell is empty. It then inserts the icon there as an image. It does not read the text, values or images already in your file, never changes a cell that has content, and has no access to your other files.
• Your email address (scope userinfo.email). It is how your purchase is found: IconFill looks up the Stripe customer with this email and, when you start a checkout, creates one. It is also shown in IconFill so you can check which Google account is used for your free inserts and purchase. Google’s installation screen may also say the add-on can ‘associate you with your personal info on Google’. That is Google’s standard sign-in association; IconFill does not request, read or store your profile information.
• Sidebars, dialogs and menus (scope script.container.ui), to show IconFill inside the editors.
• Connections to outside services (scope script.external_request), to exactly one: Stripe (api.stripe.com), to check purchases and sell the one-time unlock.

How IconFill uses that data

• Your searches run inside the sidebar in your browser, against a list of icon names and tags that comes with IconFill. They are not sent to us or to anyone else.
• Icon images are loaded by the sidebar from jsDelivr (cdn.jsdelivr.net), a public network that serves the open-source icon files. Like any website your browser visits, it receives the address of each icon file shown and your browser’s standard request details, such as your IP address; it receives no Google user data and nothing from your files. jsDelivr’s Privacy Policy applies.
• The icon you insert is drawn in your color and size in your browser and passed to Google’s Apps Script, which places it in your file. It is not stored anywhere else.
• Your settings (your purchase status and your Stripe customer number) are kept in your own Google account’s storage for the add-on.
• Free allowance records, in the same storage, keep how many of your free inserts are used. The latest insert adds a random identifier, a one-way fingerprint of the file, the icon and its size and place, and its status, so that a retry is not counted twice. No file contents or names are stored in these records.
• A count of your runs: once IconFill is on the Marketplace, the same storage counts the inserts that worked, so that after the third it can ask you, once, whether you would review it. It is used for nothing else.
• Payments are made on Stripe’s checkout page. Stripe receives your email, card and billing address; IconFill never sees your card. We can see in Stripe your email, your billing country and your purchase, which we need to provide the service and to account for tax. Stripe’s Privacy Policy applies.

IconFill uses Google user data only for the features above. It does not sell or rent it, does not use it for advertising, and passes it to no one except as those features need: your email to Stripe. IconFill has no servers of its own. The contents of your files are never sent to us or to anyone else, and IconFill uses no analytics.

IconFill does not use Google user data, including data received from Google Workspace™ APIs, to develop, improve or train AI or machine-learning models, generalized or personalized.

IconFill’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who IconFill shares Google user data with

• Stripe (our payment processor, Privacy Policy) receives your email address, to find your purchase and, when you buy, to create your customer record and take the payment. Stripe receives nothing else of your Google user data: no file content.
• Your files never leave Google’s services.

Nothing else is shared, transferred or disclosed: IconFill does not sell, rent or trade Google user data, and does not give it to advertisers, data brokers, analytics providers or any other third party. We would disclose it only if the law required us to, and only what it required.

How IconFill protects that data

• Encryption in transit. Everything IconFill sends or receives travels over HTTPS (TLS): between your browser and Google, between your browser and jsDelivr, and from Apps Script to Stripe.
• Encryption at rest. Your files, IconFill’s settings and its error log are stored by Google, which encrypts the data it stores. Your customer record is stored by Stripe, which encrypts it too.
• Access controls. IconFill runs inside Google’s Apps Script, as you, with only the scopes above and only in the file you open it in. We have no access to your files or to your settings. Your customer record sits in our Stripe account, which only we can sign in to. IconFill reaches Stripe with a restricted key that stays on Google’s servers and never reaches your browser.
• Never stored: the contents of your files outside them, your card details, and your Google password or sign-in tokens.
• Errors: when something fails, its error message (such as a Stripe error, or the editor refusing an image) goes to IconFill’s error log in Google Cloud™, which only we can read.

Keeping and deleting

• The error log is deleted after 30 days.
• Free allowance records have no automatic expiry; the next insert replaces the latest one’s record without resetting the count used.
• Your settings and free allowance records stay in your Google account’s storage for IconFill and contain no file contents. Uninstalling IconFill (Extensions > Add-ons > Manage add-ons) stops it; removing it at https://myaccount.google.com/connections also ends its access to your account, after which nothing reads them. The icons IconFill inserted stay in your files until you delete them.
• To have your data at Stripe deleted, write to us and we delete your Stripe customer. The records of your payments are kept for five years after the end of the financial year they belong to, as Danish bookkeeping law requires, and deleted after that.

Contact

Questions about this policy or your data: spyridwn.pd@gmail.com.