Privacy Policy

Last updated August 3, 2026

Overview

Mail Attachment Lens is a browser extension that lets a user search their Gmail mailbox and list matching attachments. The extension does not operate an application backend.

Gmail data

After the user grants Gmail access, the extension requests the gmail.modify OAuth scope. It uses Gmail data only to perform searches initiated by the user, display attachment metadata, download selected attachments, link back to source messages, and, when the user explicitly requests it, move messages to Gmail Trash or restore them to their previous locations by reapplying saved Gmail labels.

The scope is broader than the operations exposed by the extension. Mail Attachment Lens does not compose or send mail, permanently delete messages, or alter message contents. It modifies Gmail labels only for the user-requested Trash and Restore actions described above.

Local processing

Search queries, message metadata, attachment metadata, filtering, and sorting are processed in the browser. Attachment contents are fetched only when needed for a user-requested download.

Authentication

On Chrome, the extension uses Chrome Identity to obtain a Google OAuth access token. On Firefox, it uses Mozilla's browser.identity authorization flow and holds the access token temporarily in extension memory rather than local storage. On both browsers, the token is used only to communicate directly with Google's Gmail API over HTTPS. It is not sent to or stored by the extension developer.

Data not collected

The extension does not:

• Send Gmail data to a server operated by the developer
• Sell user data or use it for advertising
• Track browsing activity
• Permanently delete Gmail messages or bypass Gmail Trash
• Compose or send email
• Retain attachment contents after a download is complete

Local storage

The extension does not persist search results or attachment contents. Gmail message IDs and their Gmail label IDs needed for Undo are stored temporarily in the browser's extension-only local storage on the user's device. Undo history is limited to 20 recent Trash actions and expires after seven days. It is not synchronized or sent to the developer.

The extension also stores the open dashboard tab reference for the current browser session and a local version marker used when OAuth permissions change.

Third parties

Gmail data is retrieved from Google and remains subject to Google's terms and privacy policy. No additional third-party data processor is used by the extension.

Limited Use

The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The Chrome version also follows the Chrome Web Store User Data Policy. Google user data is used only to provide the extension's user-facing Gmail attachment search, download, and reversible Trash features. It is not transferred for advertising, sold to third parties, used to determine creditworthiness, or made available for humans to read.

User control

Users can revoke Gmail access through their Google Account permissions and remove local extension data by uninstalling the extension. Messages moved to Trash through the extension can be restored with selective Undo or through Gmail while they remain in Trash.

Contact

For support or privacy questions, open an issue in the public GitHub issue tracker.