Privacy Policy

Share via Gmail Chrome Extension · Last updated: May 2026

This Privacy Policy explains how the Share via Gmail Chrome extension (“the Extension”) handles your data. The Extension is designed to use the minimum data required to provide its functionality.

What the Extension does

Share via Gmail is a Chrome extension that allows users to share web pages by sending a Gmail message directly from their browser. The user selects a recipient, optionally adds a message, and the Extension sends the email using the user's Google account.

Google account permissions requested

The Extension requests the following Google OAuth scopes:

• gmail.send — Allows the Extension to send email on your behalf. It does not provide access to read, search, or modify your Gmail inbox or any existing messages.
• contacts.readonly — Allows the Extension to access contact names and email addresses from your Google Contacts to provide recipient autocomplete suggestions.

Google User Data: Access, Use, and Handling

In compliance with the Google API Services User Data Policy and Google APIs Terms of Service, the following describes how the Extension accesses, uses, stores, retains, and deletes Google user data.

Data Accessed

Gmail (gmail.send scope)

The Extension accesses only the information required to compose and send an email initiated by the user. This includes:

• Recipient email address entered by the user
• Email subject line (based on the current page title)
• Email body (including the page URL and any user-added message)

The Extension does not read, access, store, or modify any Gmail inbox data, including existing emails, drafts, labels, or attachments.

Google Contacts (contacts.readonly scope)

The Extension accesses contact names and email addresses from the user's Google Contacts solely to provide autocomplete suggestions as the user types in the recipient field.

• Only name and email address fields are accessed
• Contact data is accessed only in response to user input
• Contact data is not accessed in bulk and is not stored outside the user's device

Data Usage

Gmail data is used exclusively to send the specific email composed by the user. Emails are sent only when the user explicitly initiates the action by clicking the send button within the Extension.

Contact data is used exclusively to provide real-time autocomplete suggestions within the Extension interface.

All data accessed through Google APIs is used only to provide the core functionality of the Extension. It is not used for:

• Advertising
• Analytics
• Profiling
• Training machine learning models

We do not allow humans to read Google user data.

The Extension's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Data Storage, Retention, and Deletion

We do not collect or store personal data on our own servers. All data processing occurs locally within the user's browser or is transmitted directly between the user's browser and Google's APIs.

Retention

• Google user data accessed through Gmail and Contacts APIs is not retained by the Extension beyond what is necessary to complete the user-initiated action.
• Email content is transmitted directly to Google's Gmail API and is not stored by the Extension.
• Contact data is used temporarily for autocomplete suggestions and is not retained outside of the active session, except for locally stored recent contacts.

Local Storage

• Authentication token — Stored temporarily in Chrome's secure storage and managed by Chrome. It expires automatically and is cleared when the session ends or the user signs out.
• Recent contacts — Email addresses entered by the user may be stored locally in Chrome storage on the user's device to improve usability. This data never leaves the user's device.

Deletion

• Google user data is not stored on external servers and therefore does not require server-side deletion.
• Authentication tokens are automatically deleted by Chrome upon expiration or when the user signs out.
• Locally stored data, including recent contacts, can be deleted by the user at any time by removing the Extension or clearing browser storage.

Data Sharing

We do not sell, share, or transfer user data to third parties.

The Extension communicates only with Google services (Gmail API and People API) using the user's authenticated credentials, and only to perform user-initiated actions.

Children's privacy

The Extension is not intended for use by children under the age of 13. We do not knowingly collect personal information from children.

Changes to this policy

If this Privacy Policy is updated, the “Last updated” date will be revised. Continued use of the Extension indicates acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or how data is handled, contact:

mark@markevans.ca