Privacy Policy

1. Data Controller

Contact: codecraft013@gmail.com

2. What the extension does

"E2E Encryption for Gmail" is an unofficial browser extension that runs on mail.google.com. It encrypts the subject, message body, and attachments with AES-256-GCM before an email is sent via the regular Gmail interface, and automatically decrypts received messages in the browser, provided a matching key is stored locally.

3. What data is processed

The extension processes the following categories of personal data, exclusively locally in the browser:

• The content of your communications (subject, message body, attachments) – only temporarily held in memory in order to encrypt it before sending or decrypt it when reading.
• Contact data (name, email address, and the associated encryption key), which you create yourself via the extension's contact management.

4. Where this data is stored

Contacts and keys are stored in the localStorage of the mail.google.com page in your Chrome profile (key e2e_gmail_contacts_v1). This is the same storage area used for other website data in your browser.

• This extension has no server of its own, no cloud database, and no backend.
• There is no synchronization between devices (no chrome.storage.sync).
• The extension contains no tracking, no analytics, and no cookies.
• Encrypted messages and attachments are transmitted exclusively via Google's regular Gmail infrastructure – the extension itself does not transmit anything additionally.

5. Disclosure to third parties

No data is shared with the developer or any other third party. The developer has no access to your contacts, keys, or message content.

6. Key exchange

Encryption keys must be shared with your contacts by you personally or via a separate, secure channel (e.g., in person, messenger, phone) – explicitly not via an unencrypted Gmail message. The extension does not handle this exchange automatically.

7. Deleting your data

• You can delete individual contacts at any time via the extension's contact management.
• All data belonging to the extension can be completely deleted by removing the website data for mail.google.com in Chrome under chrome://settings/content/all, or by clearing your browsing history including "Cookies and other site data."
• Uninstalling the extension alone does not automatically delete the data stored in the browser, since technically it belongs to the mail.google.com website.

8. Permissions

The extension does not request any Chrome permissions such as storage access, history, or tabs. It merely runs a content script on https://mail.google.com/* to display the encryption buttons within the Gmail interface.

9. Changes to this policy

This privacy policy may be updated as the extension continues to be developed. The current version is always available at this URL.