Titan Privacy Policy

1. Introduction

Titan is a browser extension that helps Home Depot employees sync their work schedules from the Workforce Tool (WFT) to their personal Google Calendar. This privacy policy explains what information Titan has access to, how it is used, and what is not collected or stored.

By installing or using Titan, you agree to the practices described in this policy.

2. Summary

• Titan does not upload your Home Depot shift schedule or passwords to a Titan-owned backend.
• Core sync processing happens locally in your browser.
• Titan connects to:
  • Home Depot's Workforce Tool website to read your schedule and account context.
  • Google Calendar and related Google APIs to authenticate and create, update, or remove shift events.
  • Titan's store lookup API at titanwft.net to turn a detected store number into a formatted address for event locations.
  • GitHub (raw.githubusercontent.com/chancechime/Titan-Data) to download Titan's public store list when you use "Find your store". The list is searched on your device, and what you type is not sent anywhere.
• Identifiers, settings, known stores, Google connection state, OAuth token state, and sync metadata are stored in browser extension storage on your device.
• Titan does not sell, rent, or share your data with advertisers or data brokers.

3. Information Titan Can Access

3.1 Home Depot Workforce Tool data

Titan does not ask for or store your Home Depot password. You sign in to WFT yourself in your browser as normal. While you are on the WFT site, Titan reads the same WFT endpoints your browser already uses so it can detect your account and build shift events. Your LDAP ID is detected automatically from these requests, with no manual entry required.

Titan may also read your associate ID and basic WFT profile fields, such as department, job title, and location name, when WFT exposes them.

When you open a WFT page, Titan may also re-read your schedule, at most once every 30 minutes, and compare it with your last sync. The comparison happens on your device. If your shifts changed, Titan shows a "Your schedule changed" hint. Syncing still only happens when you start it.

The schedule data Titan reads includes:

• Work dates, start and end times
• Lunch or break timing information, when present
• Location or store information
• Department, job title, or role information, if included in the shift

Titan only reads what is already visible to you when you are signed in. It does not attempt to access any information beyond your authorized WFT account.

3.2 Google Calendar data

When you connect your Google account, Google asks you to allow Titan to do four things:

• Create its own calendar.Titan can create a calendar called "Home Depot Work Schedule" and manage the events on it.https://www.googleapis.com/auth/calendar.app.created
• See the list of your calendars. Titan reads the list so you can choose where your shifts go. It does not read the events on calendars you have not chosen.https://www.googleapis.com/auth/calendar.calendarlist.readonly
• Add, change, and remove shift events. Titan does this on the calendar your shifts sync to, including one of your own calendars if you choose it.https://www.googleapis.com/auth/calendar.events
• See your Google account email address. Titan shows it so you can tell which account is connected.https://www.googleapis.com/auth/userinfo.email

Since version 1.6.0 you can sync to one of your own calendars instead of the one Titan creates.

Each time you sync, Titan reads the events on the chosen calendar for the dates of the shifts being synced, plus one day on either side. It compares them with your shifts in your browser, so it can add what is missing and avoid duplicates. On a calendar you chose yourself, Titan only changes or removes events it added. It knows them by a private Titan marker saved on each one and by its own record of the events it created. Your other events are left alone, and nothing about them is saved. On the calendar Titan created for itself, Titan treats every event as its own.

If you use Titan's reset tool in Settings, Titan reads all the events on that calendar to find the ones it added, and removes only those.

You sign in on Google's own page, and Titan never sees your Google password. In Chrome, Edge, Firefox, and Opera, sign-in finishes inside your browser and does not pass through titanwft.net. In Safari, Google sends you back to https://www.titanwft.net/oauth-callback. That page only shows whether sign-in worked. Its address carries a one-time sign-in code from Google. Titan reads the code in your browser and hands it straight to Google to finish connecting. Because the code is part of the page's address, it reaches titanwft.net when the page loads, and the website's hosting provider (Vercel) may record it in its standard request logs. The website does not use the code, and it is not sent to any analytics service. The code works only once, and only together with a second secret that stays inside Titan on your device, so it cannot be used by anyone who sees it in a log.

3.3 How Titan handles Google user data

Titan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Titan uses your Google data only to sync your shifts to your calendar and to show which Google account is connected.
• Your Google data is not sold, not used for advertising, and not shared with anyone.
• Your Google data is not used to build, train, or improve AI or machine learning models.
• The developer does not see your Google Calendar data. It goes straight between your browser and Google, and is not sent to the developer or to titanwft.net.

3.4 Extension settings and technical data

Titan stores the following locally in browser extension storage on your device:

• Your LDAP ID, associate ID, and basic WFT user profile fields detected from WFT.
• Your Google account email, Google calendar ID and name, connection timestamps, and Google OAuth token state and expiry metadata.
• Known store records returned from Titan's store lookup service, including store number, store name, formatted address, and last-seen timestamp, plus your selected primary store. If you correct a store's name or calendar location yourself, your version is stored here too. It never leaves your device unless you choose to email it to Titan using "Report wrong details".
• User preferences such as panel behavior, theme, event formatting, calendar name, and reminder settings.
• Whether you said yes or no to Titan's notifications, and whether you finished the welcome tour. Notifications are off until you say yes. They are shown by your browser, and nothing is sent to a server to deliver them.
• Sync rate-limit state: daily sync count, cooldown timestamps, and sync history (last 25 syncs).
• A local cache of shift fingerprints and Google Calendar event IDs used to diff and update your schedule without creating duplicates.

No analytics, tracking IDs, or behavioral profiles are collected by Titan.

4. What Titan Does Not Do

Titan:

• Does not ask for or store your Home Depot password.
• Does not send your Home Depot credentials or full shift schedule to the developer.
• Does not upload your shifts to a Titan backend for analytics, profiling, or resale.
• Does not sell, rent, or trade your data with third parties.
• Does not use your information for advertising or marketing.

Titan manages the work calendar it creates. On a calendar you choose yourself, Titan only changes or removes the events it added.

5. How Your Information Is Used

Titan uses the information it accesses to:

1. Read your schedule and basic WFT account context while you are signed in to wft.homedepot.com.
2. Detect your LDAP and associate identity and build clear shift events from WFT data.
3. Compare new shifts with existing Titan-managed Google Calendar entries to avoid duplicates and sync only what changed.
4. Create, update, or remove shift events in your dedicated Google work calendar, or in a calendar you choose, as needed.
5. Look up store address data by sending a detected store number to Titan's store lookup service so event locations can be formatted consistently.
6. Find a store by downloading Titan's public store list from GitHub when you use "Find your store" in Settings. The list is searched on your device, and what you type is not sent anywhere.
7. Store sync metadata, preferences, known stores, and Google auth state locally so future syncs work correctly.

6. Data Storage and Security

6.1 Where data is stored

• Titan settings, OAuth state, known store data, and cached sync metadata are stored in your browser's extension storage on your device.
• Titan does not store your Home Depot password.
• Google Calendar events are stored in your Google account, managed by Google, under their own privacy and security practices.
• Store lookup requests go to titanwft.net. That service may respond from Titan's store directory data and, if needed, a Google Maps Places lookup based on the store number.

6.2 Encryption and risks

• Titan relies on your browser's built-in extension storage mechanisms and HTTPS transport. Titan encrypts your LDAP ID and Google sign-in tokens before storing them, and the key is kept in the same extension storage on your device. Other cached data is not separately encrypted.
• Because data is stored locally on your device, access to your computer or browser profile could expose this information.

You are encouraged to:

• Use a strong, unique password for your device and Google account.
• Log out of your browser on shared devices.
• Use operating system level encryption where possible.

7. Data Sharing and Third Parties

Titan does not share your data with:

• Advertisers or data brokers.
• Third-party analytics providers used to profile extension usage.
• The developer's own schedule-harvesting backend.

Titan may communicate with:

• Home Depot Workforce Tool sites to read your schedule and account context.
• Google Calendar and related Google account APIs to create and manage events and confirm your Google email.
• Titan's store lookup service at titanwft.net to translate a store number into an event address.
• GitHub, to download Titan's public store list (raw.githubusercontent.com/chancechime/Titan-Data) for "Find your store".

Titan's store lookup service may in turn use Titan Data or Google Maps Places as a fallback when a store number is not already in the store directory. Only a store number is sent to that service for this purpose. What you type into "Find your store" is searched on your device and is not sent to Titan or to GitHub; GitHub only receives the request for the store list file.

Titan does not transmit your full shift schedule to the Titan store lookup service.

Titan is an independent tool and is not officially endorsed, sponsored, or affiliated with The Home Depot or Google.

8. Data Retention and Deletion

• Data in browser extension storage (identifiers, OAuth state, preferences, known stores, and cache) is retained for as long as the extension is installed and configured.
• When you uninstall Titan, your browser deletes the extension and its associated local storage from your browser profile.
• You can also manually clear this data by:
  • Resetting or removing Titan's data in your browser's extension manager tools, or
  • Clearing your browser data for hosted app and extension storage.

Google Calendar events created by Titan will remain in your calendar until you manually delete them or use Titan's reset or cleanup tools.

You can remove Titan's access to your Google account at any time at myaccount.google.com/permissions.

9. Children's Privacy

Titan is intended for adult users, particularly employees managing work schedules. Titan does not knowingly collect information from children under 13. If you believe a child has used Titan with your account and you have privacy concerns, you can remove the extension and delete any created calendar events.

10. Changes To This Privacy Policy

This privacy policy may be updated from time to time to reflect:

• Changes to Titan's functionality.
• Changes to browser or platform requirements (for example, browser extension store policies or Google API policies).
• Legal or regulatory updates.

When changes are made, the "Effective date" at the top of this document will be updated. Continued use of Titan after changes are posted means you accept the revised policy.

11. Contact Information

If you have any questions or concerns about this privacy policy or how Titan handles your information, you can contact the developer:

Email: chance@titanwft.net