If you went to your Google Account permissions (often found at myaccount.google.com > Security > Third-party apps) and see an app named "Paper" created by a "Google Apps Script User," it means you (or a script you interacted with) authorized a script to access your data.
Link your Apps Script to this specific GCP Project ID via the script settings page.
While the message may still appear, using a verified custom domain and publishing as a private app can make the experience cleaner, though the security notice persists.
Ultimately, while browser extensions and iframe workarounds can hide the banner, they are temporary, client-side solutions. For developers and organizations serious about distributing Google Apps Script applications, investing the time to complete Google's OAuth verification process is the only professional path to a warning-free experience that respects both Google's policies and user security.
To remove the banner from your web app, you must either embed the app within an iframe on an external site, host it inside Google Sites, or upgrade to a Google Workspace enterprise domain .
Extensions like "Custom JavaScript for websites" can be used to inject code that sets the CSS of the banner to display: none; .
In your Apps Script editor, click on (the gear icon). Scroll down to Google Cloud Platform (GCP) Project . Click Change project and enter your new GCP Project Number.
What if you cannot complete verification (e.g., you use a personal Gmail account or cannot afford the time/cost)?
A verified status is more than just the absence of a warning; it's a badge of trust. When your app goes through Google's verification process, it assures users that your application is non-malicious and that Google has reviewed its data access practices. This can significantly increase user adoption and confidence in your product.
The banner is particularly problematic on mobile devices. Since September 2023, the banner forces the web app to zoom out to accommodate the extra header, making the content below very difficult to operate. The IFRAME hosting method is your best defense against this issue, as it completely bypasses Google's banner display on the wrapper page.
The banner is a deliberate platform security feature rather than an accidental technical limitation.
, the banner is often suppressed. For this to work, you must set the X-Frame-Options in your Apps Script code to allow embedding: javascript HtmlService.createHtmlOutputFromFile(
For developers distributing tools to clients, or businesses running internal applications, this banner can look unprofessional. It can also confuse users or make them hesitate due to security concerns.
body padding-top: 20px; /* Prevents layout elements from slipping underneath the fixed banner */ box-sizing: border-box; Use code with caution. Technical Comparison of Methods Effort Level Perfect For Banner Removed? Quick public projects, portfolios Yes (Hidden from viewer) Organization Only Access Internal tools, corporate dashboards Yes (For internal users) GCP App Verification Commercial software, public SaaS products Yes (Permanently removed) Workspace Add-on Sidebars and modals inside Sheets/Docs Yes (Replaced by add-on UI) Individual Ad-Blocker Workaround (Local Fix Only)
Create the project using your enterprise Google Workspace account.
If you went to your Google Account permissions (often found at myaccount.google.com > Security > Third-party apps) and see an app named "Paper" created by a "Google Apps Script User," it means you (or a script you interacted with) authorized a script to access your data.
Link your Apps Script to this specific GCP Project ID via the script settings page.
While the message may still appear, using a verified custom domain and publishing as a private app can make the experience cleaner, though the security notice persists.
Ultimately, while browser extensions and iframe workarounds can hide the banner, they are temporary, client-side solutions. For developers and organizations serious about distributing Google Apps Script applications, investing the time to complete Google's OAuth verification process is the only professional path to a warning-free experience that respects both Google's policies and user security. If you went to your Google Account permissions
To remove the banner from your web app, you must either embed the app within an iframe on an external site, host it inside Google Sites, or upgrade to a Google Workspace enterprise domain .
Extensions like "Custom JavaScript for websites" can be used to inject code that sets the CSS of the banner to display: none; .
In your Apps Script editor, click on (the gear icon). Scroll down to Google Cloud Platform (GCP) Project . Click Change project and enter your new GCP Project Number. Extensions like "Custom JavaScript for websites" can be
What if you cannot complete verification (e.g., you use a personal Gmail account or cannot afford the time/cost)?
A verified status is more than just the absence of a warning; it's a badge of trust. When your app goes through Google's verification process, it assures users that your application is non-malicious and that Google has reviewed its data access practices. This can significantly increase user adoption and confidence in your product.
The banner is particularly problematic on mobile devices. Since September 2023, the banner forces the web app to zoom out to accommodate the extra header, making the content below very difficult to operate. The IFRAME hosting method is your best defense against this issue, as it completely bypasses Google's banner display on the wrapper page. body padding-top: 20px
The banner is a deliberate platform security feature rather than an accidental technical limitation.
, the banner is often suppressed. For this to work, you must set the X-Frame-Options in your Apps Script code to allow embedding: javascript HtmlService.createHtmlOutputFromFile(
For developers distributing tools to clients, or businesses running internal applications, this banner can look unprofessional. It can also confuse users or make them hesitate due to security concerns.
body padding-top: 20px; /* Prevents layout elements from slipping underneath the fixed banner */ box-sizing: border-box; Use code with caution. Technical Comparison of Methods Effort Level Perfect For Banner Removed? Quick public projects, portfolios Yes (Hidden from viewer) Organization Only Access Internal tools, corporate dashboards Yes (For internal users) GCP App Verification Commercial software, public SaaS products Yes (Permanently removed) Workspace Add-on Sidebars and modals inside Sheets/Docs Yes (Replaced by add-on UI) Individual Ad-Blocker Workaround (Local Fix Only)
Create the project using your enterprise Google Workspace account.