Privacy Policy

This policy applies to the Gudaeme Chrome extension and download pages. Effective September 21, 2026.

What we collect and transmit

• Uploaded file name, size, Content-Type, and contents
• The download link inserted into the email body (file ID)
• An internal user ID created by one-way hashing the sender's immutable Google OAuth identifier (sub). Email addresses are not stored.
• Technical communication with api.inboxsdk.com that lets InboxSDK operate the Gmail compose window
• The file's SHA-256 hash sent to MalwareBazaar before upload to check for known malware. File contents are not sent.

What we do not do

• Request Google Drive access or read the entire mailbox
• Require recipients to install an extension or separate app
• Store uploaded files in Google Drive
• Collect recipient email addresses, track open funnels, or record access IP addresses

Retention and deletion

• Files are deleted 7 days after upload.
• Files and links may be deleted earlier when abuse is confirmed.
• Password-protected files are encrypted in the browser before upload, and the server stores only ciphertext.
• Signed tokens keep direct links from opening by guesswork without sign-in; they do not replace malware scanning.

Email body

The extension inserts an HTML card with the filename, size, expiry, and download button into the compose window.

Contact

A public contact address will be added here when the Chrome Web Store listing is published.