Privacy Policy

1. Who we are

Unpile is a free Chrome extension that helps you bulk-delete emails in your own Gmail™ account. It is published by Damien Flandrin, a French sole trader operating as Gekkode, 535 rue du 11 Novembre, 59162 Ostricourt, France (contact@gekkode.com). Full publisher details are in the legal notice.

This policy applies to the Unpile Chrome extension and to this website, unpile.gekkode.com.

2. Google data Unpile accesses, and why

When you connect your Google Account, you allow Unpile to access Gmail through the permission (OAuth scope) https://mail.google.com/. Unpile uses this access only to carry out the actions you start in its panel: searching your mailbox with your filters, counting and previewing the matching emails, moving them to the trash, restoring them (Undo) and, only if you confirm, deleting them permanently.

For the preview, Unpile requests Gmail’s metadata format and reads the fields listed above; it does not request full or raw message bodies or download attachments, compose or send email. The request does not use a fields mask to restrict all returned properties; unused properties in Google’s metadata response are not displayed or saved by the extension.

Why this permission? Gmail’s full-access permission is the only one that allows permanent deletion (the Gmail API method users.messages.batchDelete). Google describes it broadly, because it would also allow reading, composing and sending email; Unpile uses it only for the actions listed above.

3. Where your data goes

All Gmail API and access-revocation requests go directly from your browser to Google’s servers over an encrypted connection (HTTPS): the Gmail API at gmail.googleapis.com and, when you sign out, Google’s sign-in service to revoke Unpile’s access. The extension has no publisher server for Gmail processing: its Gmail API data is not sent to us. The separate website and support form use hosting and email services as described in section 11.

Sign-in is handled by Chrome’s built-in Google account integration. Unpile never sees your Google password, and the access token is managed by Chrome itself.

4. What is stored on your computer

Unpile keeps a small amount of data in Chrome’s extension storage (chrome.storage), on your computer only:

• your last filters, so you find them next time;
• the identifiers of the emails in a running or just-finished clean-up, so it can resume after Chrome restarts and so Undo can restore them;
• derived operational data: a counter of cleaned emails, the latest job’s action, status, processed and total counts, timestamps, progress information and any API error message; and whether you dismissed the review prompt.

While Chrome is open, Unpile also keeps your account address and the results of your latest search in Chrome’s temporary session storage, which is erased when you close Chrome or sign out.

Preview metadata is held in the panel’s memory while it is displayed; it is not written to persistent extension storage. These raw and derived Gmail data are used only to display results, carry out your requested cleanup, show progress, resume an interrupted job and offer Undo. They are not sent to the publisher or to an AI provider. Everything in extension storage is erased when you remove the extension.

5. What Unpile never does

• The extension has no publisher account or server for Gmail processing, no analytics or telemetry, no cookies, no tracking and no ads.
• The extension never sells or rents Gmail API data, sends it to the publisher, or transfers it to advertising platforms, data brokers or other information resellers.
• It never uses your data for advertising, including personalized or retargeted ads.
• It never uses your data to develop, improve or train artificial intelligence or machine learning models.
• The publisher cannot read your Gmail data: Unpile does not transmit it to the publisher or give another person access. Requests needed for your actions go directly to Google.
• It never uses your data to determine creditworthiness or for lending purposes.

6. Sharing

The extension does not transfer Gmail API data to the publisher or other recipients besides Google. Google provides Gmail, the Gmail API and Chrome’s sign-in: the requests you make through Unpile are processed by Google under the Google Privacy Policy. We do not hold the extension’s Gmail API data. Website hosting logs and support information are separate and are described in section 11.

7. Retention and deletion

• Persistent local data has no automatic expiry. Filters are replaced when you change them; the latest job and its message IDs are replaced by the next job. Signing out clears the account profile and cached search and requests revocation of Google access, but does not erase saved filters, job IDs, job details or the cleanup counter. Remove the extension to erase its persistent storage. Temporary session data is cleared when Chrome closes; preview memory is released when the panel closes.
• Emails moved to the trash stay there for 30 days, then Gmail deletes them automatically. Until then, you can restore them with Undo or from the Gmail trash.
• Emails deleted forever are erased by Gmail straight away and cannot be recovered.
• Unpile’s access to your account can be revoked at any time with “Sign out” in the panel, or at myaccount.google.com/permissions.

8. Security

• The extension’s Gmail API and access-revocation requests connect directly to Google over HTTPS.
• The access token is managed by Chrome; Unpile does not save it in its own storage.
• All of Unpile’s code ships inside the extension: it runs no code downloaded from elsewhere.
• The extension requests metadata for a preview of at most 10 messages per search, alongside the message IDs needed for counting and cleanup. It does not request full or raw message bodies or attachments.

9. Your rights

Under the General Data Protection Regulation (GDPR) and French law, you have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability.

The extension does not send us Gmail API data, so we cannot access or erase its local copies for you. For website or support information described in section 11, contact us to exercise your rights. You stay in full control: remove the extension to erase local data, revoke access from your Google Account, and manage your emails in Gmail.

If you write to us, we use your email address and message only to answer you (legal basis: our legitimate interest in replying), and keep the exchange only as long as needed to handle your request.

The data controller is Damien Flandrin (Gekkode), 535 rue du 11 Novembre, 59162 Ostricourt, France, contact@gekkode.com. You can also lodge a complaint with the French data protection authority, the CNIL, or with the authority of your country.

10. Children

Unpile is not directed to children. It is intended for people who manage their own Google Account, which requires being at least 13, or the minimum age set in your country. The extension does not transmit Gmail API data to the publisher. Website logs and any support messages are handled as described in section 11.

11. This website and contact form

unpile.gekkode.com uses no cookies, no analytics and no third-party scripts, fonts or services. Our host, Hostinger, may record standard technical logs (such as IP address, date and page requested) to deliver and secure the site.

Contact form

If you use the contact form, we receive your email address, your message, the topic, your name if you give one, and technical details that help us fix issues: your Unpile version (when you open the form from the extension) and your browser name. They are sent by email to contact@gekkode.com and used only to answer you, on the basis of our legitimate interest in providing support. We keep this correspondence for up to 3 years after our last exchange, then delete it. It is never shared or used for marketing.

To block spam without any third-party service or cookie, the form makes your browser solve a small calculation, and the server keeps for 24 hours a one-way fingerprint of your IP address (never the address itself) to limit the number of messages per visitor.

12. Changes to this policy

We will publish any change on this page with a new date. If a change affects how Unpile uses data received from Google, we will inform you in the extension and ask for your consent before it applies.

13. Contact

For any question about this policy or your data: contact@gekkode.com.