Privacy Policy

1. Who we are

Unpile is a free Chrome extension that helps you bulk-delete emails in your own Gmail™ account. It is published by Damien Flandrin, a French sole trader operating as Gekkode, 535 rue du 11 Novembre, 59162 Ostricourt, France (contact@gekkode.com). Full publisher details are in the legal notice.

This policy applies to the Unpile Chrome extension and to this website, unpile.gekkode.com.

2. Google data Unpile accesses, and why

When you connect your Google Account, you allow Unpile to access Gmail through the permission (OAuth scope) https://mail.google.com/. Unpile uses this access only to carry out the actions you start in its panel: searching your mailbox with your filters, counting and previewing the matching emails, moving them to the trash, restoring them (Undo) and, only if you confirm, deleting them permanently.

Unpile never accesses the body of your emails or their attachments, and it never composes or sends email.

Why this permission? Gmail’s full-access permission is the only one that allows permanent deletion (the Gmail API method users.messages.batchDelete). Google describes it broadly, because it would also allow reading, composing and sending email; Unpile uses it only for the actions listed above.

3. Where your data goes

All requests go directly from your browser to Google’s servers over an encrypted connection (HTTPS): the Gmail API at gmail.googleapis.com and, when you sign out, Google’s sign-in service to revoke Unpile’s access. Unpile has no server: we, the publisher, never receive, see or store your emails or any information about them.

Sign-in is handled by Chrome’s built-in Google account integration. Unpile never sees your Google password, and the access token is managed by Chrome itself.

4. What is stored on your computer

Unpile keeps a small amount of data in Chrome’s extension storage (chrome.storage), on your computer only:

• your last filters, so you find them next time;
• the identifiers of the emails in a running or just-finished clean-up, so it can resume after Chrome restarts and so Undo can restore them;
• a counter of how many emails you have cleaned with Unpile.

While Chrome is open, Unpile also keeps your account address and the results of your latest search in Chrome’s temporary session storage, which is erased when you close Chrome or sign out.

None of this is ever sent to us. Everything is erased when you remove the extension.

5. What Unpile never does

• Unpile has no server, no user account, no analytics or telemetry, no cookies, no tracking and no ads.
• It never sells, rents or shares your data, and never transfers it to advertising platforms, data brokers or other information resellers.
• It never uses your data for advertising, including personalized or retargeted ads.
• It never uses your data to develop, improve or train artificial intelligence or machine learning models.
• Nobody reads your emails: neither the publisher nor anyone else has access to them, since your data never leaves your browser.
• It never uses your data to determine creditworthiness or for lending purposes.

6. Sharing

Unpile shares no data with anyone. The only other party involved is Google, which provides Gmail, the Gmail API and Chrome’s sign-in: the requests you make through Unpile are processed by Google under the Google Privacy Policy. Since we hold no data about you, we have nothing to disclose to third parties or authorities.

7. Retention and deletion

• Data on your computer stays there until you remove the extension, which erases it. Session data is erased when Chrome closes.
• Emails moved to the trash stay there for 30 days, then Gmail deletes them automatically. Until then, you can restore them with Undo or from the Gmail trash.
• Emails deleted forever are erased by Gmail straight away and cannot be recovered.
• Unpile’s access to your account can be revoked at any time with “Sign out” in the panel, or at myaccount.google.com/permissions.

8. Security

• Unpile only connects to Google, over encrypted connections (HTTPS).
• The access token is managed by Chrome; Unpile does not save it in its own storage.
• All of Unpile’s code ships inside the extension: it runs no code downloaded from elsewhere.
• Unpile asks only for the Chrome permissions it needs, and handles as little data as possible: no email content, and details for 10 emails at most.

9. Your rights

Under the General Data Protection Regulation (GDPR) and French law, you have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability.

Because Unpile processes your data only on your own computer, we hold no personal data about you and cannot access it. You stay in full control: remove the extension to erase local data, revoke access from your Google Account, and manage your emails in Gmail.

If you write to us, we use your email address and message only to answer you (legal basis: our legitimate interest in replying), and keep the exchange only as long as needed to handle your request.

The data controller is Damien Flandrin (Gekkode), 535 rue du 11 Novembre, 59162 Ostricourt, France, contact@gekkode.com. You can also lodge a complaint with the French data protection authority, the CNIL, or with the authority of your country.

10. Children

Unpile is not directed to children. It is intended for people who manage their own Google Account, which requires being at least 13, or the minimum age set in your country. Since Unpile collects no data at all, it collects none from children either.

11. This website and contact form

unpile.gekkode.com uses no cookies, no analytics and no third-party scripts, fonts or services. Our host, Hostinger, may record standard technical logs (such as IP address, date and page requested) to deliver and secure the site.

Contact form

If you use the contact form, we receive your email address, your message, the topic, your name if you give one and, only if you leave the box ticked, your Unpile version and browser. They are sent by email to contact@gekkode.com and used only to answer you, on the basis of our legitimate interest in providing support. We keep this correspondence for up to 3 years after our last exchange, then delete it. It is never shared or used for marketing.

To block spam without any third-party service or cookie, the form makes your browser solve a small calculation, and the server keeps for 24 hours a one-way fingerprint of your IP address (never the address itself) to limit the number of messages per visitor.

12. Changes to this policy

We will publish any change on this page with a new date. If a change affects how Unpile uses data received from Google, we will inform you in the extension and ask for your consent before it applies.

13. Contact

For any question about this policy or your data: contact@gekkode.com.