PRIVACY POLICY · DRAFT FOR PRIVATE PILOT
Your mail is not our business.
Inbox Island is designed so no Inbox Island-operated server receives your Gmail token or mailbox content.
Access
Inbox Island requests Google's restricted gmail.readonly scope. That grant can read Gmail content but cannot send, modify, label, archive, delete, or mark messages read. The extension voluntarily limits each sync to recent Inbox and Sent mail, with bounded message and page counts.
Processing and storage
Mail is fetched directly from Google into your browser and classified locally. OAuth tokens remain in memory for the active run and are not refreshed or persisted. Inbox Island stores only account-scoped derived triage state locally; it does not persist raw message bodies, HTML, attachments, summaries, or OAuth material.
Sharing and analytics
Inbox Island has no application server, telemetry, advertising, or third-party analytics. It does not sell or share Gmail data.
Your control
You explicitly choose and confirm the Google account before mail is read. Disconnecting clears the active token lease and local derived state. Google-side authorization can be revoked separately through your Google Account.
Status
This policy is a publication draft for the private pilot. It will be finalized with contact, deletion, release, and source links before public distribution.