MailDefender ("the extension", "we") is a Chrome extension that helps you find mailing lists in your Gmail account, unsubscribe from them, and move unwanted email to Trash. This policy explains what information the extension accesses and how it is handled.
MailDefender works entirely inside your browser. We operate no servers that receive your data. We do not collect, sell, share, or transfer your Gmail data, and we do not use it for advertising.
When you connect a Google account, you grant these permissions:
gmail.modify): to search your mail, read message headers, and move messages to Trash. The extension reads only the From, List-Unsubscribe and List-Unsubscribe-Post headers. It does not read message bodies or attachments. It never permanently deletes mail; messages go to Trash, where Gmail keeps them for 30 days.gmail.send): used only to send an unsubscribe request on your behalf when a sender's unsubscribe option is an email address, and only after you click Unsubscribe.userinfo.email): to show which account is connected.On gmail.com, the extension also reads the sender address of the email you have open in order to show its banner. This happens in your browser and is not transmitted anywhere.
The extension saves the following in your browser's local extension storage (chrome.storage.local): the connected account's email address and its temporary Google access token; your latest scan results (sender names, addresses, email counts and unsubscribe links); and your list of senders you have unsubscribed from. This data never leaves your device. Uninstalling the extension removes it.
Gmail data is used only to provide the features you see in the extension: listing mailing lists, unsubscribing, and moving email to Trash. It is not used for advertising, profiling, or to train any model, and no human reads it.
We do not sell, rent, or share Gmail data with anyone. The only data that leaves your device is what you trigger yourself:
MailDefender's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke MailDefender's access at any time at myaccount.google.com/permissions. You can delete all locally stored data by uninstalling the extension. Because we hold no copy of your data, there is nothing stored on our side to delete.
All communication with Google uses HTTPS. Access tokens are short-lived and kept in the extension's private storage. No method of storage is perfectly secure, so keep your device and browser profile protected.
MailDefender is not directed at children under 13, and we do not knowingly collect information from them.
If we change this policy, we will update the effective date above. If a change affects how Google user data is handled, we will update this page before the change takes effect.
Questions: contact@maildefender.com