The image on the left is the screen you see when you are authorizing the App Script Saver™ to run on your computer(s). Let's take each of them as they appear because each is Google "boilerplate" and is not strictly accurate for this app. For instance…
"Create and update Google Apps Scripts projects": The app actually can not "create" a "GAS" project, but it can update an existing project that you create.
"Display and run third-party web content in prompts and sidebars inside Google applications": This is accurate, but an overstatement of the app's "reach." The only Google application the app can display and run anything in is a Google Doc™. The only third-party—from Google's perspective or you as the user's perspective—is the app developer (us). Moreover, the
"web content" Google is referring to are the elements in the sidebar: drop-down menus, icons, checkboxes, instructions, buttons, modal windows, etc., all of which are created by the app developer. There is no other third-party content in the app.
"Connect to an external device": What Google means by a "service" includes things like Paypal or Stripe (payment services), artificial intelligence (like xAI or OpenAI) and even a Google service (like their Cloud or the very permissions process that creates the screen on the left) which the app communicates with to perform tasks you request. The only "external service" (as Google means it), that the app connects to, are Google's.
"See your primary Google Account email address": While the app's code can "see" your Google Account email address, what Google means by that is as follows:
Google allows the add-on to temporarily access your primary Google Account email address only inside Google’s own systems, so it can confirm who is signed in and make sure the add-on works correctly.
The email address is not shown to the developer, not stored, and not shared. It’s used moment-by-moment by Google while the add-on is running, then discarded.
So, to recap, Google knows who you are when it runs our code, but we do not. We do not even actually know you are signed in and using our app.
"See your personal info, including any personal info you've made publicly available": If you click the information icon, Google provides this further "clarification": This app wants permission to: See your full name, your profile picture, your gender, your preferred languages, and any other information you've made publicly available. These appear scary statements, but in reality, are more boilerplate and stray the farthest away from describing what's actually going on. Google App Scripts can see this info programmatically and if it needs to use that data, can do so, but App Script Saver does not need that data and does not use it. Moreover, while the program's code can access that data, it does not and cannot expose it to the developer or anyone else. The comment about "any personal info you've made publicly available" is especially misleading. Here's the real story for the app. The only party that could see such info in theory, is Google itself, as the platform provider. As developer…
We can not access any personal info you've made publicly available.
We do not "see" any personal info you've made publicly available.
We do not display personal info you've made publicly available.
We do not store personal info you've made publicly available.
We do not transmit personal info you've made publicly available.