Privacy Policy

Last updated: June 14, 2026

Mailbox Magic is a browser extension that helps you mass‑unsubscribe and clean up your inbox in Gmail, Outlook, and Yahoo. Privacy isn't an add‑on here — it's the whole design. This policy explains, in plain language, what the extension does and does not do with your data.

The short version

• Your email never leaves your browser. All scanning and cleanup happens locally, inside your open mail tab, using your existing logged‑in session.
• We never upload, store, read, or sell your email — not the content, not the subjects, not your contacts.
• No advertising profile is ever built from your mail, and we use no third‑party trackers.
• We collect anonymous, aggregate usage counts (e.g. how many emails were unsubscribed) plus a country estimate — never tied to you, and shown publicly on our stats page. You can turn this off.
• The only times the extension talks to a server are for payment verification, anonymous usage counts, and automatic crash diagnostics — all described below.

What the extension accesses

To group your mail by sender and perform actions like unsubscribe, archive, delete, and block, the extension reads the contents of the mail web page you're viewing (Gmail, Outlook, or Yahoo) and automates the same clicks you would make yourself. This processing happens entirely on your device. We read message metadata (sender, subject line, counts) to build the sender list shown in the panel; we do not read or retain message bodies, and nothing is transmitted off your device during scanning or cleanup.

What is stored on your device

The extension keeps a small amount of data in your browser's local storage (chrome.storage). This never leaves your device except as described under "Cost & optional support," "Anonymous usage statistics," and "Crash and error reports." It includes:

• Your settings, the install date, and a random install ID.
• Your list of "protected" senders so bulk actions skip them.
• A local activity/undo log so you can review and reverse recent actions.
• A temporary scan cache (cleared when you close the tab).

Cost & optional support

Mailbox Magic is free forever — every feature is included and nothing is locked. Supporting development is entirely optional. If you choose to chip in $5/year, payment is handled by PayPal (we never receive your full card details), and our small Cloudflare Worker records only that you're a supporter, tied to a random install ID. If you never contribute, nothing changes and every feature stays available.

Anonymous usage statistics

To understand how Mailbox Magic is used and to show progress publicly, the extension sends small, aggregate counts of actions — for example, the number of scans, unsubscribes, archives, deletes, and blocks, and which provider they happened on (Gmail, Outlook, or Yahoo). These are plain numbers. They contain no message content, no sender or recipient addresses, no subject lines, and no account or install identifier. There is nothing in them that can be traced back to you.

We also record an approximate country (e.g. "US", "GB"). This is determined at our network edge from the connection and stored only as a per‑country total — we do not store your IP address, and the extension never sends or even knows your location. Country is kept at the whole‑country level only, never anything finer.

Because every figure is an aggregate total, this data is safe to publish — and we do, on our public stats page. Usage statistics are on by default but completely optional: you can turn them off any time from the extension's dashboard ("Help & feedback").

Crash and error reports

When the extension hits an unexpected error or crash, it automatically sends us a small diagnostic report so we can fix it — you don't need to do anything, and there's nothing to confirm. A report contains only diagnostics: the part of the product affected (e.g. "Gmail"), what action failed, a technical error message and stack trace, and your browser/version. It contains no message content, no sender or recipient addresses, and no account identifier. As a safety net, any email‑address‑shaped text is automatically removed before the report is sent and again when it's received, and we don't store your IP address with it. We use these reports only to fix problems and never sell or share them; they're kept for at most 90 days.

Want to add detail or report something that didn't crash? You can email us directly at [email protected] — only what you choose to send.

What we don't do

• We don't sell, rent, or share your data with advertisers or data brokers.
• We don't build a profile of your purchases, travel, or interests from your inbox.
• We don't use OAuth or connect to Gmail/Outlook/Yahoo APIs — the extension only works in your open tab.

Permissions

The extension requests access to the mail sites it supports (mail.google.com, outlook.office.com, outlook.live.com, mail.yahoo.com) so it can run there, plus a domain we control for payment verification. These permissions exist solely to provide the features above.

Data deletion

Because your mail is never uploaded, there's nothing on our side to delete for it. To remove the data stored on your device, simply uninstall the extension. To request deletion of a crash or bug report you've sent, contact us below.

Children

Mailbox Magic is not directed to children under 13 and we do not knowingly collect their data.

Changes

If this policy changes, we'll update the date above and post the revised version here.

Contact

Questions? Email [email protected].