1. Who operates the application
Family Chrome Approvals is operated by the parent or guardian who administers the family's Chrome Enterprise Core settings. It is intended for use by that household, not as a public service. It is not operated or endorsed by Google or Cloudflare.
2. Information processed
The child-facing request form collects a name and requested website address. The system also records request identifiers, submission dates, pending/approved/denied statuses, decision timestamps, and related technical errors. The parent dashboard may display these request details.
When the parent authorizes Chrome management, Google OAuth grants the application access to the Chrome Policy API. The administrator's authorized policy information, including the existing allowlist and blocklist, is accessed as needed to process approved requests.
3. Purpose and use
Information is used solely to submit and evaluate website requests, notify the parent, prevent duplicate requests, document decisions, and maintain the family's Chrome Enterprise allowlist. The public informational pages do not ask for Google credentials or receive OAuth tokens.
4. Storage and service providers
Requests and decisions are stored in a private Google Sheet, and processing is carried out using Google Apps Script. Emails may be sent through Google's email services. OAuth authorization and access tokens are handled by the administrator's Apps Script OAuth integration and Google services. These public informational pages are hosted with Cloudflare Pages, which may process ordinary web connection information.
5. Sharing
Request information is shared with the parent or guardian operating the tool and with service providers needed to run it, principally Google and Cloudflare. The application operator does not sell personal information, use it for advertising, or publish children's website requests on this website.
6. Retention and deletion
Request records are kept in the parent's private Google Sheet until the parent reviews or deletes them. The parent can delete rows, remove spreadsheet access, and revoke the app's Google authorization. Google and Cloudflare may retain operational data according to their own service policies.
7. Children and parental control
This system is established and supervised by a parent or guardian. It is designed to receive minimal information needed for a child's website request and is not intended for children to create independent administrator accounts.
8. Security
The parent dashboard is restricted to the designated parent's Google account, while the administrator's Chrome Policy API authorization is kept in a separate Apps Script project. These controls are intended to prevent a child-facing form from directly modifying Chrome Enterprise policies. No internet service can guarantee absolute security.
9. Contact and corrections
To request access to, correction of, or deletion of a family request record, contact the parent or guardian who operates the application. For OAuth-related support, use the developer support email shown on the application's Google authorization screen.
10. Changes
This policy may be updated if the application changes. The effective date on this page will be revised when material changes are made.