Privacy Policy

Last updated: July 7, 2026

EMAILFETCHER ("we", "our", "the service") operates at https://emailfetcher.site. This policy explains how we collect, use, and protect information when you use our service.

1. Who we are

EMAILFETCHER is a secure inbox-sharing platform. Shop admins connect their Gmail account so they can share the latest unread email with their customers through a time-limited access code. End users never see Gmail credentials.

2. Information we collect

From admins (OAuth)

Google account email address (via userinfo.email)
OAuth tokens (encrypted at rest) to read Gmail on the admin's behalf
Email content from the connected inbox: subject, sender, body, and received date (via gmail.readonly)

From end users

6-digit access codes entered on the homepage (not linked to a Google account)
Basic access logs (time, code used, IP address for security)

From all users

Standard server logs (IP, browser type, pages accessed)

3. How we use information

Display the latest unread email to authorized end users who enter a valid code
Allow admins to manage connected Gmail accounts and generate access codes
Maintain security, prevent abuse, and troubleshoot the service
Comply with legal obligations

We do not sell personal data. We do not send, delete, or modify emails. We only read email content as permitted by the Gmail read-only scope.

4. Google API Services User Data Policy

EMAILFETCHER's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data only to provide the inbox-sharing features described in this policy. We do not use Google user data for advertising, and we do not transfer it to third parties except as required to operate the service (hosting provider) or as required by law.

5. Data storage and security

OAuth tokens and email content are encrypted at rest on our server
Access is restricted to authenticated admins and valid end-user codes
Connections use HTTPS (TLS)

6. Data retention

Gmail access and user codes expire based on the admin-configured access period (typically up to 30 days)
Expired codes and access tokens are removed automatically
Admins can disconnect Gmail at any time, which removes associated data

7. Your rights

Admins can revoke Gmail access at any time through their Google Account permissions (myaccount.google.com/permissions) or by disconnecting in the admin portal.

To request deletion of your data or ask questions about this policy, contact us at the support email listed in our Google OAuth consent screen.

8. Children

EMAILFETCHER is not intended for users under 13. We do not knowingly collect data from children.

9. Changes

We may update this policy. The "Last updated" date at the top will change when we do. Continued use of the service after changes means you accept the updated policy.

10. Contact

Questions about this privacy policy: use the support email on our homepage or Google OAuth app listing.