Your data security is our top priority. Learn how we protect your information.
Your emails and attachments never leave Google's ecosystem. All processing happens directly in your browser. We cannot see, access, or store your email content.
❌ Your data goes through their servers
❌ They can see your email content
❌ Privacy depends on their policies
✓ Direct connection Gmail → You
✓ We can't see your emails
✓ Your data stays private
Only download counts are synced with our servers for quota tracking
Built with Manifest V3, providing enhanced protection against malicious code injection and cross-site scripting attacks.
We never see your Google password. Authentication is handled securely by Google using industry-standard OAuth 2.0.
We only request the permissions absolutely necessary for functionality. No access to send emails, delete data, or modify your account.
Your preferences and session data are stored locally in your browser. All data is automatically cleared when you uninstall the extension.
We use Chrome's secure storage API to save your settings and maintain your session. This data never leaves your browser and is encrypted by Chrome.
Core functionality - allows the extension to save email attachments as ZIP files to your chosen download location. We cannot access your downloaded files.
Enables secure OAuth authentication with Google. We never see your password - Google provides us with a temporary token to access your emails on your behalf.
Used for periodic tasks like checking your subscription status and managing offline sync queues. Helps maintain smooth operation without constant polling.
Allows the extension to update progress indicators and navigate to external pages (like our website) when needed. Limited to UI updates only.
Required to add our bulk save button to Gmail and read email data when you request downloads. We only access emails you explicitly select.
All payment processing is handled by Stripe, a PCI Level 1 certified payment processor. We never see or store your credit card information.
We use official Google APIs to access Gmail and Google Drive. All communication is encrypted and follows Google's strict security standards.
You can verify our "no server" claim by monitoring network traffic:
You'll only see connections to:
googleapis.com - For Gmail datagoogle.com - For authenticationstripe.com - For payments (Pro users)If you have any security concerns or questions, please don't hesitate to contact us at ladi@iamladi.com. We take all security reports seriously and will respond promptly.