Overview
Short version: This extension does not collect personal data, and nothing it handles is sent to a Lobov Labs server. Processing happens in your browser, and data goes only to Google Sheets and to your own YouTrack. Google Drive access is limited to the spreadsheets you pick or that the extension creates for you.
What the extension does
YouTrack → Google Sheets is a Chrome extension that reads issue data from your YouTrack instance and writes it to a Google Spreadsheet of your choice via the Google Sheets API.
It can also keep the status column in that spreadsheet up to date by re-reading the current status of issues already listed in the sheet (the “Update statuses” feature).
Data accessed
The extension accesses the following data solely to perform the export function:
- Issue fields visible on the current YouTrack page (ID, title, status, priority, author, assignee, dates)
- Issue status data read from your YouTrack instance through its REST API, using your existing signed-in YouTrack session in the browser, when you run the “Update statuses” sync
- Your Google account identity: only to authorise writes to Google Sheets on your behalf
- Your Google account email address: used solely to populate the “Added by” field in the spreadsheet row, so team members can see who exported each issue. The email is written only to the spreadsheet you selected and is not transmitted to any other service.
- The Google Spreadsheet you explicitly select as the export destination
- When you run the “Update statuses” sync, the contents of that spreadsheet needed for it: the issue IDs and statuses already in the sheet. They are read only to work out which rows need a new status, and are sent nowhere except back to that spreadsheet and, as issue IDs in request addresses, to your YouTrack instance
Data storage
The extension stores only the following items in Chrome’s extension storage (chrome.storage.sync). If you are signed in to Chrome with sync turned on, Chrome may sync them across your devices through your Google account. That sync is handled by Chrome itself; Lobov Labs has no access to it.
- Your settings: export fields, language, sheet name and the “update done tasks” option.
- The ID and name of the spreadsheet you last used, and the address of your YouTrack instance, so the status sync knows where to read from.
- A summary of the last status sync: how many rows were updated, unchanged or not found, and when.
While a status sync is running, the list of status changes waiting for your confirmation is kept on this device only (chrome.storage.local) and is removed once you apply or cancel it.
The extension does not store your OAuth token itself. Chrome issues and caches it through its built-in identity API (chrome.identity) and renews it as needed.
No data is sent to any server operated by Lobov Labs.
Data sharing
We do not sell, trade, share, transfer, or disclose Google user data to any third parties.
The extension transmits data only to:
- Google Sheets API: to write YouTrack issue data into the spreadsheet you selected. This transmission is governed by Google’s Privacy Policy.
- Your YouTrack instance: to read issue data from the page currently open in your browser, and from its REST API during status sync, using your existing browser session.
No Google user data is sent to Lobov Labs servers or any other external services.
Choosing an existing spreadsheet
When you choose “Select existing” in the settings, the extension opens a page on lobovlabs.com that shows Google’s own file picker (Google Picker). The picker needs an OAuth token to list your spreadsheets, so that page asks the extension for a short-lived token (valid for about an hour) while the window is open.
The token stays in that browser window. It is used only to call Google’s APIs, it is not put in the page address and not saved, and the page has no server-side component that could receive or log it. The only thing passed back to the extension is the ID and name of the spreadsheet you picked.
Data protection
All communication between the extension and Google APIs is conducted exclusively over HTTPS/TLS.
Authentication is handled via Google OAuth 2.0. The extension never sees your Google password. The OAuth token is issued and cached by Chrome (chrome.identity) and is never transmitted to Lobov Labs servers.
Access is limited to a single scope, drive.file. It covers only the spreadsheets you pick in Google Picker and the ones the extension creates for you. No other file in your Google Drive can be read or changed.
Data retention and deletion
Lobov Labs does not store any Google user data on its servers. There is nothing to retain or delete on our end.
Data stored locally in your browser:
- OAuth token: stored by Chrome and automatically managed by the browser. You can revoke access at any time at myaccount.google.com/permissions.
- Settings, last-used spreadsheet ID and YouTrack address: stored in Chrome extension storage for convenience. They are removed when you uninstall the extension.
To remove all data the extension has stored, uninstall it from Chrome.
Google API scopes
The extension requests the following OAuth scopes:
https://www.googleapis.com/auth/drive.file: to create a new spreadsheet on your behalf (automatic mode), and to read and write the existing spreadsheet you pick in Google Picker, including one shared with you by others.
This scope grants access only to the spreadsheets you pick or that the extension creates. No other files in your Google Drive are accessed or modified.
Third parties
The extension interacts only with:
- Google Sheets API: to write exported data on your behalf
- Google Picker: Google’s file picker, shown on lobovlabs.com when you choose an existing spreadsheet
- Your YouTrack instance: to read issue data from the page you have open and, during status sync, from its REST API
No analytics, tracking scripts, or advertising SDKs are included.
Permissions
The extension requests the following Chrome permissions:
- activeTab: to read the address and YouTrack issue data of the current tab when you click the extension
- scripting: to inject the content script that reads issue data from YouTrack pages
- storage: to save your settings and the last-used spreadsheet ID in Chrome extension storage
- identity: to authenticate with Google OAuth 2.0
- identity.email: to read the signed-in Chrome profile email, used only to populate the “Added by” field when exporting to a spreadsheet
- Host access to YouTrack: for YouTrack Cloud and JetBrains-hosted instances it is granted by default; for self-hosted YouTrack (any domain) it is optional and requested at runtime, per site, only when you use the extension, solely to read issue data
Contact
Questions or concerns about this privacy policy? Reach out at lobovlabs@proton.me