# Google Sheets bridge setup

This bridge is optional. Do not paste a Firebase password or service-account key into any page.

1. Open `google-apps-script/Code.gs` in a new Apps Script project owned by the event account.
2. Set a long random shared token in Apps Script Properties, not in source control.
3. Deploy the script as a Web App restricted to the intended event operators.
4. Paste only the Web App URL and matching shared token into Data Sync.
5. Run a test export using dummy records before any real contestant data is collected.

Treat the resulting Sheet as sensitive: restrict sharing, enable account MFA, and delete test exports.