Privacy Policy for Gmail Code Autofill Extension

Effective Date: December 5, 2024

Last Updated: December 5, 2024

1. Introduction

This Privacy Policy explains how the Gmail Code Autofill Chrome Extension ("the Extension") collects, uses, and protects your information. By installing or using the Extension, you acknowledge that you have read, understood, and agree to be bound by the collection and use of information in accordance with this policy.

2. Information We Collect

The Extension accesses specific Gmail message contents solely to extract verification codes (e.g., two-factor authentication codes, one-time passwords) relevant to the autofill functionality.

We do not collect or store:

• Your email address
• Email metadata (sender information, subject lines, timestamps)
• Any email content unrelated to verification codes
• Browsing history or personal information

The Extension uses the following Google API scope:

• https://www.googleapis.com/auth/gmail.readonly (read-only access to Gmail messages for the explicit purpose of verification code extraction)

3. How We Use Information

The Extension uses the Gmail API exclusively to:

• Detect new incoming messages that may contain verification codes
• Extract the relevant code using regular expressions and pattern matching
• Autofill the extracted code into supported website form fields

All data processing occurs locally within your browser session. No data is stored, transmitted, or shared with any external servers, third parties, or other services.

4. Data Storage and Transmission

• Zero server interaction: All processing occurs exclusively within your browser session
• No persistent storage: The Extension does not maintain any persistent storage of user data after completing its autofill action
• No analytics or tracking: We do not implement any analytics, tracking, or monitoring of usage patterns or user identities
• No data transmission: Your verification codes and email contents never leave your local browser environment

5. Third-Party Access

The Gmail Code Autofill Extension operates entirely locally and does not share your data with any third parties, including but not limited to:

• Analytics providers
• Advertising networks
• Data brokers
• Other service providers

6. Data Security

Despite the Extension's client-side processing and lack of data storage, we implement the following security measures:

• Requesting only the minimum Gmail API scopes necessary for functionality
• Full disclosure of all permissions in the Chrome Web Store listing
• Implementation of OAuth for secure, user-consented access to Gmail
• Regular security reviews of our codebase

7. User Control

You maintain full control over the Extension's access and can revoke permissions at any time:

• Go to your Google Account settings: https://myaccount.google.com/permissions
• Locate and remove access for "Gmail Code Autofill"

Additionally, you can uninstall the Extension from Chrome at any time to immediately terminate all functionality and access.

8. Legal Compliance

The Gmail Code Autofill Extension is designed to comply with relevant data protection and privacy laws, including the principles of data minimization and purpose limitation. We process only the data necessary to provide the service you explicitly request when installing the Extension.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any modifications will be reflected on this page with a revised "Last Updated" date. We encourage users to review this Privacy Policy regularly for any changes.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the Extension's privacy practices, please contact:

Qendrim Beka
Email: qendrim@ualberta.ca
Website: https://www.qendrimbeka.com