Privacy Policy

Last updated: July 10, 2026

Everything that can run locally, runs locally — for everyone, forever. Folder sorting, rules, suggestions, smart folders, snooze, analytics, and the network graph all execute entirely inside your browser. Your emails are read via Google's Gmail API with the read-only scope, cached only in your browser's local extension storage, and never sent to us or anyone else.

Exactly two optional Premium features use an Email Elysium server, because they cannot work without one: open tracking and meeting scheduling. Both are off by default, require your explicit opt-in, and are described precisely below. If you never enable them, this extension makes no network connections other than to Google.

What runs 100% locally (free and premium alike)

Email metadata sync (Gmail API, gmail.readonly scope only — the extension cannot send, modify, delete, or label your mail; Google rejects write calls at the API level)
Folder classification, rules, rule suggestions, smart folders (Urgent / Needs reply / Awaiting reply), snooze, unsubscribe surfacing, analytics dashboard, network graph
All of the above store data only in chrome.storage.local on your device. Uninstalling the extension deletes it.

Payments (Premium)

Payments are processed by ExtensionPay (extensionpay.com) and Stripe. We never see your card details. The extension contacts extensionpay.com only after you click "Upgrade" or "Restore purchase" — a free install that never clicks those buttons makes zero requests to it. What ExtensionPay stores about you is governed by their privacy policy.

Optional server features (Premium + explicit opt-in, off by default)

If — and only if — you enable them, these features talk to our server (a Cloudflare Worker):

Open tracking. When you switch "Track opens" on for a specific email, an invisible tracking pixel is added to that email. When a recipient's mail client loads the pixel, our server records: the pixel's random token, the time, the user-agent string, and a keyed cryptographic hash of the IP address (never the raw IP). We never receive the email's content, subject, or recipient list — only a random token and, where available, a Gmail thread identifier. Tracking is per-email: nothing is tracked unless you switch it on for that message.

Meeting scheduling. If you set up a booking page, our server stores your display name, chosen page handle, weekly availability window, and timezone. When someone books a slot, it stores the time, their name, the email address they enter, and an optional note — the minimum needed to hold the booking.

Both features are keyed by a random installation identifier that contains no personal information. Disabling a feature stops all associated network activity immediately.

What we never do

No analytics, telemetry, fingerprinting, or usage tracking of you
No AI/model calls; no email content ever leaves your browser
No selling, sharing, or transferring of data to third parties
No Gmail write scopes — ever

Data retention & deletion

Local data is deleted when you uninstall the extension or use the in-app "Full wipe". For server-side data (opens, bookings, availability), contact us with your booking-page handle or from the email used at purchase and we will delete it.

Limited Use disclosure

Email Elysium's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Questions or deletion requests: open an issue at github.com/AP-1120/email-elysium or email the address listed on the Chrome Web Store listing.