Privacy Policy

Last updated: 17 October 2026

In short: Inbox Sweep runs entirely in your web browser. Your emails go directly from Google to your browser and are never sent to, stored on, or seen by us or anyone else. We don't run a server that receives your data, we don't use analytics or advertising, and we never sell data.

Who we are

Inbox Sweep (inboxsweeper.netlify.app) is made by an independent developer who builds small tools to make everyday life easier, first for personal use, and then shares them with others. Inbox Sweep is one of them. If you find it useful, you can support it for about the price of a coffee. That helps keep new tools coming and covers the AI subscriptions and other costs behind them.

The developer is responsible for Inbox Sweep under data protection law. If you have any question about this policy or your data, email syedwajahatali1990@gmail.com.

What Inbox Sweep accesses in your Gmail

When you press Connect Gmail, you sign in with Google and choose whether to give Inbox Sweep access. With your permission, the app reads only what it needs to help you clean up your mailbox:

Sender details of your emails: the sender's name and email address, the date, the email's size, and Gmail's labels and categories (such as Promotions or Spam).
Unsubscribe information that senders include in their emails (the "List-Unsubscribe" details).
Subject lines, only for: emails shown in the large-emails list, so you can tell them apart before deleting; and, when you press Find my subscriptions, receipt and renewal emails from the last 13 months, to work out which services you may be paying for.
Which emails are unread, to show how often you open each sender.
Recipient addresses of emails you have sent (To, Cc and Bcc), only to work out which people you correspond with, so they can be protected from bulk deletion.
Your Gmail address, to keep each account's saved information separate.

Inbox Sweep never reads the body or attachments of your emails. Some features ask Gmail to search your mailbox for certain words (for example "receipt" or "welcome to"); Gmail runs the search and Inbox Sweep only receives which emails matched.

What Inbox Sweep does on your behalf

Inbox Sweep only takes these actions when you ask it to, and shows you what will happen before it does:

Deletes emails you select, either permanently (they skip Gmail's Trash and cannot be recovered) or by moving them to Trash, where you can restore them for 30 days, as you choose. It can also empty your Trash when you ask.
Unsubscribes you from mailing lists. Depending on what the sender supports, it sends a standard one-click unsubscribe request to the sender's web address, or sends a short unsubscribe email from your Gmail account to the address the sender provides. In both cases the sender receives the request, as they would if you unsubscribed yourself.
Sends data deletion requests when you ask it to: from Your digital footprint, it writes a request under the GDPR for a website to delete your data. You check the address and text, and it is sent from your own Gmail to that website only.
Blocks senders by creating a filter in your Gmail settings that moves their future emails to Trash. You can remove it with Unblock, or in Gmail under Settings, Filters and blocked addresses.

Unsubscribe pages that a sender hosts on their own website open only when you click them, and are governed by that sender's own privacy policy.

Where your data is stored

Everything Inbox Sweep works with stays in your own browser on your own device:

The sender details from your scan are saved in your browser's storage, so your next scan only needs to check new emails.
Your settings and history (space freed, senders you unsubscribed from, blocked or protected) are saved in your browser, separately for each Gmail account.
Your Google sign-in is held in memory only while the page is open. We don't store it, and it expires after about an hour.

None of this is sent to us. You can delete it at any time with Remove my data from this browser in the app, or by clearing your browser's site data. To stop Inbox Sweep's access to your Google account entirely, press Disconnect, or remove Inbox Sweep at myaccount.google.com/permissions.

Google API Services User Data Policy

Inbox Sweep's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

We use Gmail data only to provide the clean-up features you see in the app.
We do not transfer Gmail data to anyone, except as described above when you ask the app to unsubscribe you.
We do not use Gmail data for advertising, and we do not sell it.
No person reads your Gmail data. It never leaves your browser.
Gmail data is not used to train artificial intelligence or machine learning models.

Services involved in running the app

Google provides sign-in and the Gmail connection. Google's own privacy policy applies to your Google account.
Netlify hosts the Inbox Sweep web page. Like any web host, Netlify processes technical data such as your IP address to deliver the page. Netlify never receives your Gmail data. See Netlify's privacy policy.

Inbox Sweep uses no cookies for tracking, no analytics and no advertising.

Your rights

Because your Gmail data stays on your device, you are in full control of it and can delete it at any time as described above. Under data protection law, including the GDPR, you also have the right to ask us about any personal data we hold about you, and to request its correction or deletion. Apart from emails you choose to send us, we hold none. You also have the right to complain to a data protection authority.

Children

Inbox Sweep is not intended for children under 16.

Changes to this policy

If we change how Inbox Sweep handles data, we will update this page and the date at the top before the change takes effect.