What leaves the browser, and what does not.

Last updated 12 October 2026.

This policy covers the GmailClass Chrome extension and the website at gmailclass.ticekralt.com. GmailClass does not run its own server and does not add analytics to the extension.

The extension

GmailClass classifies Gmail messages that are already loaded on screen. It adds its own category chips. It does not send, delete, archive, mark read, or apply Gmail labels.

Classification stays off until you save a TypeSafe API key, acknowledge the disclosure, and turn it on. A connection test uses a synthetic subject, not mail from the inbox.

What can be sent

When classification is enabled, list metadata and your category instructions are sent to TypeSafe at https://api.typesafe.ai/v1/systemone. For each loaded row, that can include:

• Sender name and address, when Gmail shows them
• Subject
• The visible snippet
• The displayed date
• Your category descriptions and optional priority context

Message bodies and attachments are not read. Metadata can still be private. This is not local or anonymous inference. Requests go to TypeSafe with your own key.

Email text is sent as data. It is not rendered as HTML, and model output can only change the extension’s chips and its own interface.

What stays on this browser

The TypeSafe API key is stored in chrome.storage.local, with trusted-context access, so content scripts cannot read it. That storage is still part of the browser profile. It is not a hardware-backed encrypted vault. Replacing or removing the key clears the saved connection check. The old key is not written to logs.

Cached judgments store probabilities and ids, not message bodies. Overrides stay on this browser until you reset them or delete the category. Account scopes are SHA-256 hashes of the observed account email. Hashing is not encryption.

Permissions

• storage — settings, cached judgments, and the API key
• alarms — recover classification work after the service worker stops
• https://mail.google.com/* — read the open message list and show chips
• https://api.typesafe.ai/* — send list metadata for classification when you enable it

This website

The pages here are static. This site does not run its own analytics and does not ask you to create an account. It is hosted on Vercel, which may keep ordinary request logs such as IP address and user agent.

The homepage embeds a demo from YouTube. Loading that player contacts Google and can set cookies under Google’s own policies. The player is served from youtube-nocookie.com. The typefaces are loaded from Google Fonts.