NTnS Laptop Monitor — Privacy

Prepared November 12, 2026

Scope of this notice

This notice describes the optional Gmail reader and private operations dashboard used by the owner of New Things n Stuff LLC. It does not replace the store’s separate shopping privacy policy. Store advertising, cookies, analytics, and marketing practices do not authorize those uses of Google mailbox data in this tool.

What is accessed and why

After the owner’s Google consent, the reader requests exactly https://www.googleapis.com/auth/gmail.readonly. This is mailbox-wide read permission. The runtime confirms the expected mailbox and uses local query and sender-authentication checks to process supported Mercari sale and rating alerts. The sender filter is local code and does not narrow the Google permission itself. Selected message bodies and headers are processed to recognize those alerts; unknown or ambiguous templates are held for review.

What is retained

The reader retains minimized cache and event records, including Gmail message identifiers, sender, subject, received time, sender-authentication result, recognized Mercari item identifiers, earnings or fee values where present, and a link for the owner to open the original Gmail message. Raw MIME and full message bodies are processed in memory and are not persisted by this reader. Customer postal addresses and email tracking links are not retained in its minimized signal cache. Derived order, task, health, and event records support the private review and fulfillment workflow.

Storage and service providers

The local records are stored on the owner’s laptop. OAuth access and refresh tokens are kept in a separate record encrypted with Windows current-user DPAPI and bound to the selected mailbox and dedicated Desktop client. These tokens are not placed in dashboard snapshots or plaintext logs. Derived records synchronized to the private dashboard are processed through OpenAI Sites and its Cloudflare Workers/D1 hosting and storage. If device notifications are enabled, limited alert title/body content passes through the browser-selected push service; Android Chrome uses Google/FCM. This does not mean every supported browser or provider is enabled.

Uses and disclosure limits

Google-derived data is used for the owner’s requested private business operations workflow. This deterministic reader does not sell Google data, use it for advertising or marketing, or use it to train general AI models. Human review of specific messages or derived records requires the owner’s authorization. Use and transfer of information received from Google APIs follow the Google API Services User Data Policy, including its Limited Use requirements.

Retention and deletion requests

Historical business records currently remain until owner-directed deletion; no automatic deletion period is configured. To request review, correction, or removal, email eric@ntns.store. The owner reviews the requester’s identity, the records requested, operational dependencies, and any records that need to remain. The response explains what can be removed and what remains. This is a manual request process, not a self-service deletion button or a promise of immediate removal from backups. Deletion of local records, dashboard records, and backups requires review of each relevant copy.

Revocation and security limits

The owner can revoke the app’s access through Google Account connections. Revocation stops future successful Gmail reads but does not erase records already stored locally, in the private dashboard, or in backups. Reconnection requires a new reviewed authorization when needed. Encryption and access controls reduce risk but do not guarantee absolute security.

Contact and changes

Contact eric@ntns.store about this app’s data practices or deletion requests. Material changes to this app’s Google-data processing will be reflected in this notice and reviewed before broader access is requested.