Privacy Policy

Citation Gap Finder (Chrome extension)

What we access: Citation Gap Finder reads the text content of your open document in Google Docs or Overleaf only when you click "Run Check." We do not read content automatically or in the background.

How we read your document:

• Overleaf: we read text directly from the editor in your browser. Your document text never leaves your browser.
• Google Docs: because the modern Google Docs editor renders text to a canvas (no readable DOM), we ask Google's own plain-text export endpoint (https://docs.google.com/document/d/.../export?format=txt) for your document text. This request is sent to Google — who already hosts your document — using your existing browser session. Your document text never reaches our servers and is never seen by any third party. This is the same operation Google offers under File → Download → Plain Text.

What we send to our servers:

• License key validation: when you have a license, we send only your license key to our validation server (a Cloudflare Worker). We do not send any document content.

Citation Gap Finder makes no other network calls. DOI checking is performed entirely in your browser using a strict regex-validation step against the DOIs in your reference list — we do not call CrossRef or any third-party DOI registry from the extension.

What we store:

• Locally in your browser (IndexedDB): your license key, your trial status, and a count of issues found in your last 50 checks. No document content is stored.
• On our servers: your email address (only if you purchase a license), your license key, and your subscription status.

Payment processing: Citation Gap Finder subscriptions are processed by Stripe. When you purchase, you provide your payment information directly to Stripe — we never see or store your card details. See Stripe's Privacy Policy.

Activation emails: we send your license key to the email address you provide at checkout via Resend (our transactional email provider). The sending domain is support@gradsummit.com. See Resend's Privacy Policy.

Research Quote Capture (Chrome extension)

What we access. When you press Ctrl+Shift+Q (Cmd+Shift+Q on Mac), the extension reads the text you have selected on the current tab, the page's URL, its <title>, and a small set of citation-related <meta> tags (such as citation_doi, citation_title, citation_author). Reading happens only at the moment you press the shortcut, only on the tab you have focused, and only via Chrome's activeTab permission. The extension does not run on any page until you invoke the shortcut.

How we read your page.

• We call window.getSelection() to read the highlighted text.
• We read document.location.href and document.title.
• We read citation meta tags (citation_doi, citation_title, citation_author, citation_publication_date, citation_journal_title, dc.identifier, dc.creator) and JSON-LD ScholarlyArticle data, when present.
• We do not read form fields, cookies, localStorage, sessionStorage, or any other tab data.

What we send to our servers.

• Your license key (string only) — sent to research-quote-capture-api.muhraf-livify.workers.dev for activation, validation, and revocation checks.
• For Pro users only: the detected DOI string — sent to api.openalex.org to fetch citation metadata. OpenAlex is a public, free academic-citation API operated by OurResearch. The DOI string contains no personally identifying information.
• We never send the selected text, the page URL, the page title, or any other page content to any server.

What we store.

• Locally on your device only: all captured quotes, including the selected text, page URL, page title, timestamp, DOI, and any citation metadata returned by OpenAlex. Stored in the browser's IndexedDB. Deleted when you uninstall the extension or clear browser data for the extension.
• On our license server: license key, the email you used at checkout (so we can resend the key on request), purchase timestamp, subscription status, and a 7-day cache of validation results. No quote data, no URLs, no page content.

Payment processing. Subscriptions are processed by Stripe. We never see your card number. Stripe's privacy policy.

Activation emails. License keys are delivered by Resend. Resend's privacy policy.

Methods Section Sanity Checker (Chrome extension)

What we access: Methods Section Sanity Checker reads the methods section of the Google Doc you have open only when you click Scan methods section. On the Paste tab, only the text you type or paste into the textarea inside the side panel.

How we read your document:

• Google Docs: via the standard ?format=txt export endpoint (https://docs.google.com/document/d/.../export?format=txt) — the same operation Google offers under File → Download → Plain Text. The request is sent to Google — who already hosts your document — using your existing browser session. Your document text never reaches our servers and is never seen by any third party.
• Paste tab (Overleaf, Word, Pages, Scrivener, anywhere else): only the text you paste into the textarea inside the extension's side panel. Stays in your browser process; nothing is scraped, nothing is sent to our servers. v1 ships Google Docs as the only one-click integration; first-class Overleaf integration arrives in v1.1.

What we send to our servers:

• License key validation: when you have a license, we send only your license key to our validation server (a Cloudflare Worker at methods-checker-api.muhraf-livify.workers.dev) — once at activation and once every seven days thereafter. We do not send any document content.

Methods Section Sanity Checker makes no other network calls. The detection engine runs as pure regex over curated keyword libraries entirely inside your browser — we do not call any AI, LLM, or external API to score your text.

What we store:

• Locally on this device only (in chrome.storage.local and IndexedDB): your license key, your chosen default guideline, your "Mark as addressed" overrides per document URL, and a count of items found in your last 50 scans (counts only — never document text). Deleted when you uninstall the extension or clear browser data for the extension.
• In Chrome's sync storage (in chrome.storage.sync): your trial start timestamp, and only that. Chrome syncs this to your Google account so the 7-day trial timer follows you across the devices you use Chrome on; the value is encrypted by Chrome in transit and is not visible to us. It never reaches our servers. If you have Chrome sync turned off, the timestamp stays on this device only.
• On our servers (Cloudflare Workers KV): your license key, the email you used at checkout, your subscription status, and timestamps for activation and renewal. No document content. No URLs. No usage patterns.

Payment processing. Methods Section Sanity Checker subscriptions are processed by Stripe. When you purchase, you provide your payment information directly to Stripe — we never see or store your card details. See Stripe's Privacy Policy.

Activation emails. License keys are delivered by Resend. The sending domain is support@gradsummit.com. See Resend's Privacy Policy.

Books (Mastering Research series)

Books in the Mastering Research series are sold and delivered by Amazon. Your purchase, billing, and delivery information is handled entirely by Amazon under their privacy policy. We do not collect or store any data about book purchases on this website.

This website (gradsummit.com)

The website itself uses Google Analytics (GA4) to count visits and understand which pages are useful. The data is aggregated and we do not associate page views with individual identities. You can opt out of Google Analytics by installing the official browser opt-out.

We do not use marketing cookies, ad-tracking pixels, or third-party trackers beyond Google Analytics.