Roster Sync privacy policy

Effective 26 October 2026

Roster Sync is a free browser extension, made by an individual developer at ducktake.com, that copies your shifts from NSW Health's Employee Online roster into a calendar in your own Google account. This policy explains what it accesses, how it uses it, and how to remove it.

What it accesses

• Your roster page: on Employee Online sites (addresses ending in .ros.health.nsw.gov.au) it reads the dates and shifts shown, such as "D 08:30 - 17:00 @ Biochem". It never reads your Employee Online password or any other website.
• Google Calendar (calendar.app.created): lets it create one calendar named Work roster and add, change and delete events in calendars it created. It cannot see or change events in any other calendar.
• Your Google calendar list (calendar.calendarlist.readonly): lets it read the names of your calendars, so it can find the Work roster calendar it made when you use it in another browser or on another computer.
• A Google sign-in token that lasts about an hour. It never sees your Google password, email address or profile.

How it uses that data

Only to keep the Work roster calendar matching your roster: adding new shifts, updating changed ones and removing cancelled ones. Calendar names are compared inside your browser to find that calendar and are not kept.

Where it is stored

• Your shifts are stored only in the Work roster calendar in your own Google account.
• On your computer, in the browser's extension storage: the Work roster calendar's ID, the time and size of the last sync, whether you disconnected, and your settings (automatic sync, shift colours, light or dark). No shift details. The sign-in token is kept in memory only.
• Roster Sync has no server. Nothing is sent to the developer or to anyone except Google.

How your data is protected

Data moves only between your browser and Google, over encrypted HTTPS. The Google sign-in token is kept in memory only, is never written to disk and is never sent anywhere except Google. Roster Sync has no server, so the developer never receives, sees or keeps a copy of your data.

Sharing

Your data is never sold, shared or transferred to anyone, used for advertising, read by any person, or used to train AI or machine learning models. Roster Sync does not use data obtained through Google Workspace APIs to develop, improve, or train generalized AI and/or ML models.

Keeping and deleting your data

• Click Disconnect in the Roster Sync toolbar popup to revoke its access, or remove it at myaccount.google.com/permissions.
• Delete the Work roster calendar in Google Calendar settings to delete your synced shifts.
• Remove the extension to delete everything it stored on your computer.
• How long it is kept: your shifts stay in the Work roster calendar until you delete it, and the settings on your computer stay until you remove the extension. The sign-in token expires after about an hour. Roster Sync keeps no other copy, so there is nothing else to delete; for questions, email hello@ducktake.com.

Google API Services

Roster Sync's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

This website

pondertime.party sets no cookies and runs no analytics. Cloudflare processes connection data such as IP addresses to deliver the page.

Changes and contact

Changes to this policy will be posted here with a new date. Questions: hello@ducktake.com.