Privacy notes

MailSignal is a sender-side observation tool. It records image requests, link requests, and hosted-document viewer events for messages and files its users choose to track. Those signals are not proof that a person read or understood anything.

Sign-in and Gmail sending are separate Google consents. Refresh tokens are encrypted at rest. They are not placed in the extension's content script or in page-accessible storage. Disconnecting Gmail asks Google to revoke the token and then deletes the local copy.

Message bodies are not stored. Subjects, recipient addresses, and link destinations are stored so the dashboard and redirects can work. Destination query strings are kept for the redirect and omitted from exports and ordinary logs. Tracking tokens are omitted from ordinary logs.

Raw IP addresses are encrypted in a short-lived enrichment row and deleted after lookup or after 15 minutes. The dashboard shows an approximate city, region, and country only when the address does not look like a proxy, relay, or hosting provider. Otherwise it shows Unavailable or Proxy location.

Public document links are bearer links: anyone with the URL can open them. Verified links send a code to an email address. The code shows that the address requested access. It does not show who looked at the screen. Revocation stops later access and does not erase downloads. Hiding the download button does not prevent screenshots.

You can export your data and delete the account from Settings. Retention deletes old messages, events, notifications, and hosted files. This page is an explanation of product behavior, not a legal certification.