Shift Lens

Privacy Policy

Effective date: October 15, 2026.

This policy covers Shift Lens for Chrome and Firefox, the website, the Demo, and project support.

Contact support with privacy questions.

At a Glance

Schedule Data

Shift Lens uses your existing First Due session to read personnel names and user identifiers, assignment and position identifiers, coverage, dates, times, and schedule time zones. These are used to display, search, and filter the calendar and calculate scheduled hours. The signed-in user identifier is also read from the First Due page to identify your shifts and detect account changes. Schedule records and user identifiers are processed in browser memory, not persistent storage; closing the overlay or tab ends this processing.

Schedule reads use HTTPS requests to First Due, including the requested date range and the session cookies the browser normally sends to that site. Reads occur when loading or browsing the calendar and during automatic refresh while it is open. First Due receives these requests; local processing does not mean the extension makes no network requests.

Exit Shift Lens to stop its schedule reads. You can disable automatic opening in Settings or disable or remove the extension to prevent future extension use. This does not stop First Due's own activity or delete records held by First Due.

Shift Lens does not change your schedule. It does not extract passwords, cookies, or session tokens, sell schedule data, or send it to the developer or a separate service. First Due handles requests under its own policies and your organization's arrangements. Shift Lens has no advertising or analytics.

Browser Store Policies

Chrome: Shift Lens's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Personnel and schedule data are used only to provide the calendar and its related features, not for advertising, profiling, sale, creditworthiness, or lending decisions. The extension does not send this data to the developer or provide it to others for human review. These limits also apply to information derived from that data.

Firefox: These same data-use limits apply to the Firefox add-on. Mozilla's Add-on Policies require data transmission to be limited to what is necessary for functionality and data to be used only for its stated purpose. The First Due requests described above are part of that functionality, not analytics or advertising. "Limited Use" is Chrome's policy terminology, not a separate Mozilla certification.

The Firefox add-on declares personally identifying information and website content as required data categories for its authenticated First Due functionality. Firefox presents these requirements during installation; you can cancel installation if you do not agree. This declaration does not mean schedules are uploaded to the developer: the recipients and local processing are described above.

Saved Preferences

These preferences are separate on the First Due and Demo sites; automatic opening is available only on First Due. If storage is unavailable, appearance is temporary, the time-format control is unavailable, automatic opening cannot be saved, and tab restoration may be unavailable. Removing the extension does not remove website preferences; clear the relevant site's data to delete them. This may also sign you out.

Browser Access

The extension uses activeTab and scripting to open the calendar through the toolbar or your enabled automatic-opening preference. Site access is limited to https://sizeup.firstduesizeup.com/* for schedule reads, launch, and restoration after reload. Automatic opening applies only to supported Shift Board pages. Clicking from another page replaces the current tab with the First Due Shift Board; no browsing history or schedule URL is saved.

Code is bundled with the extension, not loaded remotely. It runs within the First Due page using that page's session; style isolation is not a security boundary against a compromised host page.

Website, Demo, and Support

The Demo generates invented schedules locally, has no First Due login or connection, and cannot change your schedule. It requires an online load and does not provide offline caching.

The website and Demo have no analytics or advertising added by Shift Lens and no schedule upload. GitLab Pages hosts both. GitLab records visitor IP addresses, access times, and pages visited in server access logs; its Privacy Statement currently specifies a seven-day retention period for Pages logs. GitLab does not receive First Due schedule data from the extension. Visiting Chrome Web Store or Mozilla Add-ons links is subject to the respective store's policies.

Support emails create project tickets in GitLab Service Desk. The developer uses your email address, message, and any attachments to respond to and resolve your request; GitLab processes and stores them under its Privacy Statement. Support content remains in project tickets and correspondence unless deleted, subject to GitLab's retention practices. Contact support to request access, correction, or deletion of your support information; copies already made public may not be recoverable. Reports may be public. Never send real schedules, personnel details, credentials, cookies, or private agency URLs. Shift Lens has no server-side schedule records to delete; contact your organization or First Due about records held there.

Changes to data handling will be reflected in this policy.