Trace Tab

Privacy Policy

Last updated: September 7, 2026

Türkçe · English · Deutsch

This privacy policy explains how the “Trace Tab” Chrome extension (the “Extension”) processes your personal data. By installing or using the Extension you accept this policy.

1. Summary

• We run no server. All data flows directly between your browser and the services of Google, Microsoft and Tavily; no data passes through any server we control.
• We do nothing beyond viewing your emails — no deleting, sending, replying or archiving. We only read the sender / date / subject / short preview of your unread emails and summarize them.
• Your API keys (Gemini, Tavily) and OAuth session data are stored only in your own browser (chrome.storage.local) and are never shared with us or any third party.
• We do not sell your data, use it for advertising, or share it with third parties for marketing.

2. What data we process

2.1 Email data (Gmail / Outlook)

When you connect your Gmail or Outlook account, the Extension reads only the following from your unread inbox emails:

• Sender name / address
• Date
• Subject
• A short content preview (snippet)

This information is sent to the Google Gemini API to produce a 1–2 sentence summary of the email and a priority level (low / medium / high). The summary is produced in the language you selected in the interface (Turkish, English or German). The generated summary is cached only in your own browser (chrome.storage.local) so the same email is not summarized repeatedly. You can clear this cache at any time from the Settings page.

The Extension does not delete, send, reply to, forward or modify your emails. Only read-only access is used.

When you click an email card, that email or your inbox opens in a new tab in Gmail's / Outlook's own web interface; this happens entirely through your browser.

2.2 AI chat (Gemini)

Messages you type with the “Quick Ask” feature are sent directly from your browser to the Google Gemini API to generate a response. Your earlier messages in a conversation are re-sent with subsequent requests to preserve context. This conversation history is kept only in the currently open tab, in browser memory; it is discarded when you close the tab or open a new one, and is never stored persistently anywhere.

2.3 Web search (Tavily)

If you check the “Search the web” option, your question is sent to the Tavily search API to fetch current results. This only happens when you explicitly enable that option.

2.4 Data stored locally

The following is stored only in chrome.storage.local on your own computer and is not shared with us or anyone else:

• Your Gemini and Tavily API keys
• Gmail / Outlook OAuth access and refresh tokens
• Appearance preferences such as your chosen language, theme and greeting title / subtitle
• The cache of previously summarized emails

This data is deleted only when you uninstall the Extension or clear the relevant connection / cache yourself.

3. Who we share data with

We do not share your data with any third party for marketing, advertising or sale. For the Extension to work, it communicates directly with the following services (each subject to its own privacy policy):

• Google — Gmail API (reading email), Gemini API (summarization and chat), Google OAuth (authentication for the Gmail connection)
• Microsoft — Microsoft Graph API (reading Outlook email), Microsoft identity platform (authentication for the Outlook connection)
• Tavily — search API, only when the “Search the web” feature is used

Requests to these services go directly from your browser; no server of ours is in between, because we don't have one.

4. Compliance with the Google User Data Policy

Trace Tab's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Gmail data is used only for the summarization feature described in Section 2.1.
• This data is not subject to human review, is not used for advertising, and is not used for credit scoring or lending.
• Data is not retained longer than necessary for the described functionality (see Section 2.4).

5. Data security

Your API keys and session tokens are stored in chrome.storage.local, scoped to your browser profile. The Outlook connection uses the industry-standard PKCE (Proof Key for Code Exchange) OAuth 2.0 flow. The Extension never sends any of your credentials (password, API key, token) to our server or any third party's server.

6. Disconnecting and deleting your data

• You can disconnect the Gmail / Outlook connection with one click from the Settings page; this deletes the locally stored session token.
• You can clear the email summary cache at any time with the “Clear cache” button on the Settings page.
• When you remove the Extension from Chrome, all data in chrome.storage.local (API keys, cache, preferences, tokens) is automatically deleted by Chrome.

7. Children's privacy

The Extension does not target children under 13 and does not knowingly collect data from them.

8. Changes to this policy

We may update this policy from time to time. For significant changes, the “Last updated” date at the top of this page will be revised.

9. Contact

For questions about this policy or the Extension's data practices: yusaguverdik@gmail.com

Developer: Yuşa Göverdik (yushadev0)