MailDigest — Privacy Policy

Last updated: 2026-10-31 · v0.8

The short version: the developer cannot see your email, because there is no server. The extension itself reads your Gmail list on your device to build the digest.

What the extension does

MailDigest runs entirely inside your browser on Gmail pages you open. It reads the sender, subject, snippet and date of messages visible in your Gmail list, classifies them locally (rules + heuristics, or an AI provider you choose), and shows you a digest.

Data flows — exactly

• Local mode (default): message data never leaves your device.
• BYOK mode (optional): if you enter your own API key for OpenAI, Anthropic or Google Gemini, the sender/subject/snippet of promotional messages is sent from your browser directly to that provider under your own account and that provider's privacy policy. It is never sent to, stored by, or routed through the developer.
• Your API key and settings are stored only in chrome.storage.local on your device.

What the extension accesses (on your device)

• Email addresses and names of senders, and the subjects/snippets of promotional messages visible in your Gmail list — read and classified locally to build your digest, stored only in chrome.storage.local on your device.
• Text of the Gmail page you are viewing — read locally for the same classification.
• Your own API key, only if you enter one for BYOK — stored only in chrome.storage.local, used only to authenticate your own requests to the provider you pick.
• In local mode (default), none of the above leaves your device. In BYOK mode, the sender/subject/snippet of promotional messages is sent from your browser directly to the provider you chose, for classification only.

There is no analytics, no account system, no telemetry, no advertising, and no sale of data — there is no developer backend to collect anything into.

Actions on your mail

The extension never deletes anything on its own. Deleting happens only when you click a cleanup/recycle button, uses Gmail's own Trash (recoverable for 30 days), and never touches messages the classifier marks as bills, statements, security, orders or deliveries.

Permissions

• https://mail.google.com/* — to read the list you are looking at and to click Gmail's own delete controls when you ask.
• storage — to keep your settings, lists and digest state on your device.
• alarms, notifications — for the optional Friday reminder.
• Optional provider hosts (OpenAI / Anthropic / Gemini) — requested only if you enable BYOK, only for the one provider you pick.

Contact

Questions about this policy: support@mcp100.dev