Privacy Policy

Last updated October 13, 2026

This Privacy Notice for qonaf ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://qonaf.com/print-with-comments/ or any website of ours that links to this Privacy Notice
• Use Print with Comments for Google Docs ("the extension"). The extension is a Chrome extension that prints, or saves as PDF, the Google Doc you have open with its comments in the margin, and exports those comments to CSV or Markdown. It reads the Doc from Google with your own Google session and lays it out in your browser: your documents never reach our servers.
• Engage with us in other related ways, including any support request

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hi@qonaf.com.

Summary of key points

What personal information do we process? The free version processes nothing about you on our side: the document you print, its comments and your settings stay in your browser. If you choose Pro, you sign in with Google, and we process your Google account identifier and email address; our payment provider, Stripe, processes your payment details. Learn more about what information we collect.

Do we process any sensitive personal information? No. The content of your documents may be sensitive, which is exactly why it is never sent to us.

Do we collect any information from third parties? Only if you sign in with Google to use Pro: Google then sends us your account identifier, email address, name and profile picture.

How do we process your information? To provide and administer Pro, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so. Learn more.

With which parties do we share personal information? Only with the few providers that make Pro work, never for advertising. Learn more.

How do we keep your information safe? First by not collecting it: your documents are never sent to us. No electronic transmission or storage can be guaranteed to be 100% secure. Learn more.

What are your rights? Depending on where you live, you may have rights over your personal information. Learn more.

How do you exercise your rights? Email us at hi@qonaf.com. You can also cancel Pro yourself from the extension's settings, or choose "Delete everything" on the page that opens when you remove the extension.

Table of contents

1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on to process your information?
4. When and with whom do we share your personal information?
5. How do we handle your social logins?
6. Is your information transferred internationally?
7. How long do we keep your information?
8. How do we keep your information safe?
9. Do we collect information from minors?
10. What are your privacy rights?
11. Controls for Do-Not-Track features
12. Do United States residents have specific privacy rights?
13. Do we make updates to this notice?
14. How can you contact us about this notice?
15. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

What the extension reads on your device

In short: Your documents stay in your browser. We do not receive them.

• The Google Doc you print: when you click "Print with comments", use the keyboard shortcut or an export, the extension downloads the Doc you have open from Google, with your own Google session, like Google Docs' File › Download menu. It downloads two official exports of that Doc (web page and .docx) and lays them out in a tab of the extension, on your computer.
• Text, images and comments: the text, images, comments, authors' names and dates are processed in memory, in your browser, and discarded when you close the tab. No document content is sent to us or to any third party, and none is stored.
• Exports: the PDF you save and the CSV or Markdown files you export are saved on your computer, where you choose.
• Settings: your layout, paper, highlight, author and date choices are saved in Chrome's extension storage, on your computer. We cannot see them.
• No analytics, no tracking: the extension contains no analytics, advertising or tracking code and does not record your browsing. It only runs on docs.google.com, and only when you ask it to print or export.

Personal information you disclose to us

In short: Only if you choose Pro or write to us.

We collect personal information that you voluntarily provide when you sign in with Google and subscribe to Pro, when you ask to receive news about the extension, or when you contact us. It may include:

• email address
• authentication data (your Google account identifier)
• your language, and whether you asked to receive news

Sensitive Information. We do not process sensitive information.

Payment Data. If you subscribe to Pro, your payment details are entered on Stripe's own checkout page and handled and stored by Stripe. We never see your card details. Your email address is given to Stripe so it can send your receipts. Stripe's privacy notice: https://stripe.com/privacy.

Social Media Login Data. Pro requires signing in with your Google account. See "How do we handle your social logins?".

Your Pro subscription

Our server keeps no database and no account record. To know whether you have Pro, it asks Stripe whether a subscription exists for your Google account. Stripe keeps your subscription status (active or not, renewal date), your email address, your language and whether you asked for news. A sealed, encrypted token kept in the extension lets our server check your subscription without asking you to sign in again. The extension checks it from time to time (Chrome's "alarms" permission).

Our website

Our website uses no cookies, no analytics and no advertising tags. Our hosting provider, Cloudflare, may keep standard technical logs (IP address, date, page requested) for security, for a short period.

After you uninstall

When you remove the extension, Chrome opens a page on our server. Its address contains your language, the extension's version, whether you had Pro and, if you had Pro, an encrypted token valid for 30 days. That token can only be used to open your subscription page at Stripe or to "Delete everything". The page may show a short, optional survey hosted by Tally (tally.so). Only what you choose to answer is sent, with your language, the extension's version and whether you had Pro. You can skip it.

Emails from Print with Comments

• Welcome email: when Pro starts, we send one welcome email to your Google email address, with how Pro works and how to cancel. No advertising, sent once.
• News (optional, off by default): if you tick the box asking for news, your email address is added to our mailing list. Stop at any time with the "Unsubscribe" link in any news email. "Delete everything" also removes you.
• Emails are sent through our email provider, Resend. Stripe sends your payment receipts. If you write to us, we answer from hi@qonaf.com.

Google API

For Pro, the extension only asks Google for your basic profile (openid, email, profile) to recognise your subscription. It does not ask for access to your Google Drive, Gmail or any other Google data. The Doc you print is downloaded with your existing Google Docs session in your browser, never through our server. Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Permissions the extension asks for

• storage: to keep your settings on your computer.
• scripting: to add the print button and read the open Doc's address, only on docs.google.com.
• identity: only for the optional Google sign-in, for Pro.
• alarms: to refresh your Pro status from time to time.
• docs.google.com and googleusercontent.com: to download the Doc you have open, with its comments and images, from Google. The extension does not run on other websites.

2. How do we process your information?

In short: To provide and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

• To deliver the service. Checking your subscription and unlocking Pro options on each of your computers.
• To offer support. Answering your questions and solving issues.
• To send administrative information. Changes to our terms and policies, and similar information.
• To manage your subscription. Payments, card changes and cancellation, through Stripe.
• To send you emails. One welcome email when Pro starts and, only if you ticked the box, news. See "Emails".
• To request feedback. The answers you choose to send in our optional uninstall survey.
• To protect our Services. Fraud monitoring and prevention.
• To protect an individual's vital interest, such as to prevent harm.

3. What legal bases do we rely on to process your information?

In short: We only process your personal information when it is necessary and we have a valid legal basis under applicable law.

If you are located in the EU or UK, this section applies to you. Under the GDPR and UK GDPR we rely on:

• Consent, for news and the optional survey. You can withdraw it at any time. Learn more.
• Performance of a Contract, to provide Pro and send the welcome email.
• Legitimate Interests, to keep our Services secure and prevent fraud, where those interests do not outweigh your rights and freedoms.
• Legal Obligations, such as keeping billing records, or responding to lawful requests.
• Vital Interests, to protect the safety of any person.

If you are located in Canada, this section applies to you. We process your information with your express or implied consent, which you can withdraw at any time. In some exceptional cases, applicable law may permit processing without consent, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection with consent would compromise the availability or accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If the information is publicly available and is specified by the regulations

4. When and with whom do we share your personal information?

In short: Only with the providers that make Pro work.

• Google, for sign-in (Pro only).
• Stripe, for payments, invoices and subscription management.
• Resend, which sends our welcome email and, if you ask for them, our news, and keeps the mailing list.
• Cloudflare, which hosts our website and our server.
• Tally, which hosts our optional uninstall survey.

Your documents are never shared with anyone: they are never sent to us in the first place. We do not sell your personal information. We may also share it:

• Business Transfers. In connection with any merger, sale of assets, financing, or acquisition of our business.
• Legal requests. Where required to comply with applicable law, a court order, or legal process.

5. How do we handle your social logins?

In short: If you sign in with Google for Pro, we receive basic profile information.

Pro requires signing in with your Google account. Google then sends us your account identifier, email address, name and profile picture. Your name and picture are only shown in the extension so you know which account is connected; our server does not store them. Your account identifier and email address are used to find your subscription at Stripe and to send your receipts and welcome email. We do not control, and are not responsible for, other uses of your information by Google; please review Google's privacy notice.

6. Is your information transferred internationally?

In short: We may transfer, store, and process your information in countries other than your own.

Our server runs on Cloudflare's global network, and Google, Stripe, Resend, Cloudflare and Tally may process data in the United States, the European Union and other countries, which may not have data protection laws as comprehensive as those in your country. We take the necessary measures to protect your information in accordance with this notice and applicable law.

European Commission's Standard Contractual Clauses: for transfers from the EEA or UK, we rely on the Standard Contractual Clauses offered by our providers, which require them to protect that information in accordance with European data protection law. Further details can be provided upon request.

7. How long do we keep your information?

In short: As long as necessary for the purposes of this notice, unless the law requires longer.

Your documents and their comments are never kept: they exist only in the extension's tab while it is open. Your settings stay in your browser until you remove the extension. Files you saved or exported stay on your computer until you delete them.

Your subscription and payment records are kept by Stripe while you are subscribed, then as long as tax and accounting law requires. Your email address stays on our mailing list until you unsubscribe or choose "Delete everything". When we no longer need personal information, we delete or anonymize it.

8. How do we keep your information safe?

In short: Through organizational and technical security measures, starting with not collecting your documents.

Your documents are never transmitted to us. The sign-in token kept in the extension is sealed with authenticated encryption (AES-GCM), with a key only our server holds. All connections to our server use HTTPS. Payment details are handled only by Stripe. However, no electronic transmission over the Internet or storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never be able to defeat our security.

9. Do we collect information from minors?

In short: We do not knowingly collect data from or market to children under 16.

We do not knowingly collect data from, or market to, children under 16 years of age or the equivalent age specified by law in your jurisdiction. Pro is not intended for them. If we learn that we have collected such data, we will promptly delete it. If you become aware of any, please contact us at hi@qonaf.com.

10. What are your privacy rights?

In short: Depending on where you live (for example the EEA, UK, Switzerland, Canada or some US states), you have rights over your personal information.

These may include the right (i) to access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict processing, (iv) to data portability, and (v) not to be subject to automated decision-making. You may also have the right to object to processing. Contact us using the details in "How can you contact us about this notice?". We will respond within 30 days.

You can also act on your data yourself:

• Cancel Pro: extension settings, "Manage subscription". Removing the extension does not cancel the subscription by itself.
• Delete everything: on the page that opens when you remove the extension, "Delete everything" cancels Pro immediately and removes your email address from our mailing list. Stripe keeps only the billing records the law requires.
• Stop news: the "Unsubscribe" link at the bottom of each news email.
• Sign out: extension settings, "Sign out".
• Remove access to your Google account: at myaccount.google.com/connections.

If you are located in the EEA or UK, you may complain to your Member State data protection authority or the UK data protection authority. In Switzerland, you may contact the Federal Data Protection and Information Commissioner. In Quebec, you may contact the Commission d'accès à l'information.

Withdrawing your consent: you can withdraw your consent at any time by contacting us, by unsubscribing from our news, or by signing out in the extension's settings. This does not affect the lawfulness of processing before the withdrawal, nor processing based on other legal grounds.

11. Controls for Do-Not-Track features

Most web browsers include a Do-Not-Track ("DNT") setting. No uniform technology standard for recognizing DNT signals has been finalized, so we do not respond to them. In any case, Print with Comments does not track your browsing. If a standard is adopted that we must follow, we will say so in a revised version of this notice.

12. Do United States residents have specific privacy rights?

In short: If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to access, correct, get a copy of, or delete your personal information, and to withdraw your consent.

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months.

We may also collect other personal information when you ask for support or answer our optional survey. Retention: Category A, as long as you have Pro (kept by Stripe, not by our server); Categories B and D, kept by Stripe as long as required by law.

Sources of Personal Information

See "What information do we collect?"

How We Use and Share Personal Information

See "How do we process your information?" and "When and with whom do we share your personal information?". We disclose personal information to our service providers under written contracts. We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months, and we will not sell or share personal information in the future.

Your Rights

• Right to know whether we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of targeted advertising, the sale of personal data, or profiling (we do none of these)

Depending on your state, you may also have the right to obtain the list of categories or specific third parties to which we have disclosed personal data, and to limit the use of sensitive personal data. Print with Comments does not use voice or facial recognition.

How to Exercise Your Rights

Email us at hi@qonaf.com. You can designate an authorized agent to make a request on your behalf; we may deny a request from an agent who cannot prove they are validly authorized.

Request Verification

We will need to verify your identity before acting on your request, usually by asking you to write from the email address linked to your subscription. We only use information provided in your request to verify your identity.

Appeals

If we decline to act on your request, you may appeal by emailing us at hi@qonaf.com. We will answer in writing with our reasons. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83 lets California residents request, once a year and free of charge, information about personal information we disclosed to third parties for direct marketing purposes. We do not disclose personal information for that purpose. You can still make a request by email.

13. Do we make updates to this notice?

In short: Yes, as necessary to stay compliant with relevant laws.

The updated version will be indicated by an updated "Last updated" date at the top of this notice. If we make material changes, we may notify you by posting a notice or by sending you a notification. See also our Terms of Service.

14. How can you contact us about this notice?

If you have questions or comments about this notice, email us at hi@qonaf.com.

15. How can you review, update, or delete the data we collect from you?

Depending on the laws of your country or state, you may have the right to access the personal information we collect from you, correct it, or delete it, and to withdraw your consent. To do so, email us at hi@qonaf.com. You can also cancel Pro and choose "Delete everything" yourself at any time.