...
View the currently logged in user. This is a general permission required for user-facing apps, and is necessary for the app’s “custom field” component.
App can send data to these external domains
App uses Google analytics to gather certain usage data that helps us analyze how the app is used.
Who gets email notifications about detected secrets?
...