HomeAboutCase Studies
BlogPodcastNewsletterShare via Gmail
Get in Touch

Privacy Policy

Share via Gmail Chrome Extension · Last updated: April 2026

This Privacy Policy explains how the Share via Gmail Chrome extension (“the Extension”) handles your data. We take your privacy seriously and have built the Extension to operate with the minimum data access necessary to do its job.

What the Extension does

Share via Gmail is a Chrome extension that lets you share web pages with others by sending a Gmail message directly from your browser. You choose the recipient, optionally add a personal note, and the Extension sends the email on your behalf using your Google account.

What Google account permissions do we request

The Extension requests two Google OAuth scopes when you sign in:

gmail.send — This allows the extension to send email on your behalf. It does not give access to read, search, or modify your inbox or any existing emails. The Extension can only send the specific message you compose.

contacts.readonly — This allows the extension to suggest recipients from your Google Contacts as you type in the “Send to” field. It is used only to populate autocomplete suggestions. No contact data is transmitted to any external server.

Google User Data: Access, Use, and Handling

In compliance with the Google API Services User Data Policy and Google APIs Terms of Service, the following section thoroughly and clearly discloses how the Extension accesses, uses, stores, and shares Google user data.

Data Accessed

Gmail send access (gmail.send scope): The Extension accesses only the data required to compose and send a single email message on your behalf. This includes the recipient’s email address (entered by you), the subject line (auto-filled with the current page title), and the message body (auto-filled with the page URL plus any personal note you choose to add). The Extension cannot read, search, modify, delete, or otherwise access your inbox, sent mail, drafts, labels, or any other Gmail data.

Google Contacts read access (contacts.readonly scope): The Extension reads contact names and email addresses from your Google Contacts solely to suggest recipients as you type in the “Send to” field. Only the name and email address fields are accessed. No other contact details (such as phone numbers, physical addresses, or notes) are read or used.

Data Usage

Gmail data is used exclusively to deliver the specific email you compose through the Extension. Email content (recipient address, subject, and body) is transmitted directly to Google’s Gmail API and is not stored, logged, intercepted, or used for any purpose other than sending that individual message.

Google Contacts data is used exclusively for real-time autocomplete suggestions within the Extension interface. Contact names and email addresses are never stored on external servers, never used for advertising or profiling, and never shared with any third party.

The Extension’s use of data received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Google user data accessed through Google APIs is used only to provide the core sharing functionality described in this policy. It is not used for advertising, analytics, profiling, or training machine learning models, and is not transferred to third parties for any purpose.

Data we collect and store

We do not collect, transmit, or store any of your personal data on our servers. All data used by the Extension stays on your device:

Authentication token — When you sign in with Google, an access token is stored temporarily in Chrome's session storage. It expires automatically and is cleared when you close your browser.

Recent contacts — Email addresses of people you have previously shared with are saved locally in Chrome's storage, so they appear as quick suggestions. This list never leaves your device.

Page content — The title, URL, and preview image of the page you are sharing are used only to compose the email you send. They are not stored or transmitted anywhere other than in the email itself.

Data sharing

We do not sell, share, or transfer your data to any third parties. The only external service the Extension communicates with is Google's own Gmail API and People API, using your authenticated credentials, to send email and look up contacts on your behalf.

Children's privacy

The Extension is not intended for use by children under the age of 13. We do not knowingly collect any information from children.

Changes to this policy

If we make material changes to this Privacy Policy, we will update the “Last updated” date at the top of this page. Continued use of the Extension after any changes constitutes acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy or how the Extension handles your data, please contact us at mark@markevans.ca or visit marketingspark.co.