Privacy Policy

Last updated: September 17, 2026.

Nooman is a Chrome extension that replaces the new tab page. It is developed and published by Gallera Studio. The extension runs entirely in your browser: it has no server of its own, collects no analytics, and does not send your data to the developer or to third parties.

What data is used and why

• Google Calendar. When you connect a Google account, Nooman requests read access to your calendars (calendar.readonly) and, the first time you create or edit an event, write access to events (calendar.events). Events are cached in the browser's local storage so the new tab can show them instantly. Access tokens are stored locally and are sent only to Google's servers.
• Email address of connected accounts (openid email) is used to tell accounts apart in settings and in the event list.
• Location. For the weather line, Nooman asks for browser geolocation. If you decline, it falls back to IP-based lookup via ipwho.is or to a city you enter manually. Coordinates are stored locally and sent only to the weather service.
• Weather and geocoding. Coordinates are sent to api.open-meteo.com (weather), geocoding-api.open-meteo.com (city search by name) and api.bigdatacloud.net (city name by coordinates). These services receive only coordinates or a city name.
• Quick link icons are loaded from www.google.com/s2/favicons using the site address of your links.
• Background image, settings, cities and links are stored only in the browser's local storage.

What the extension does not do

• It does not read your browsing history, your tabs, or the content of other websites.
• It does not send data to the developer. There is no backend.
• It does not sell or share data with third parties.
• It does not show ads and does not use your data for advertising.

How your data is protected

• No server, no copies. Nooman has no backend. Calendar data, access tokens and settings never leave your browser except in direct requests to Google's own APIs. Gallera Studio operates no infrastructure that receives, stores or processes your data, so nobody at Gallera Studio can access it.
• Local storage. All data is kept in Chrome's extension storage (chrome.storage.local) inside your browser profile. Chrome isolates this storage from websites and from other extensions. On disk it is protected by your operating system's user-account permissions and, where enabled, by full-disk encryption such as FileVault or BitLocker.
• Encryption in transit. Every request the extension makes uses HTTPS (TLS). The extension can only contact the hosts listed on this page: they are declared in the extension's manifest and enforced by Chrome.
• Access tokens. Sign-in uses Google OAuth 2.0 through Chrome's identity API. Nooman never sees or stores your Google password. Google issues short-lived access tokens that expire after one hour; the extension does not hold long-lived refresh tokens. Tokens are used only to call the Google Calendar API and Google's user-info endpoint on your behalf.
• Minimum scopes. Only read access is requested when you connect an account. Write access to events (calendar.events) is requested separately, the first time you create or edit an event, and you can keep using the extension with read-only access.
• Retention. Cached events are kept only while the account is connected and are refreshed from Google. Disconnecting an account removes its tokens and cached events immediately. Uninstalling the extension removes all extension data from the browser.
• No remote code. All code the extension runs is packaged inside it and reviewed by the Chrome Web Store. No scripts are loaded from the network.

Use of Google user data

Nooman's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data and the email address of connected accounts are used only to display, create, edit and delete events on the new tab page at the user's request. They are used for no other purpose.

Nooman does not share, transfer or sell Google user data to anyone, including the developer, advertisers, data brokers or other third parties. The only recipient of Google user data is Google itself, when the extension calls the Google Calendar API on your behalf. No human at Gallera Studio reads this data.

Nooman does not use Google user data, including Google Calendar data obtained through Google Workspace APIs, to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models, and does not transfer such data to any third party for that purpose.

Deleting your data

Disconnect an account in the extension settings or uninstall the extension: all local data is removed. You can revoke the extension's access to your Google account at any time at myaccount.google.com/permissions. Because Gallera Studio holds no copy of your data, there is nothing further to delete on our side.

Changes to this policy

If this policy changes, the new version is published at this address with an updated date. Changes that affect how Google user data is handled will be reflected here before they take effect.

Contact

Gallera Studio, support@gallerastudio.com