Extension privacy policy

Who we are

The extension is published by HYPER10N TECHNOLOGIES SAS, a French simplified joint-stock company with share capital of 1,000 EUR, registered office in France. Contact: our contact form

What the extension collects

Always, for tracked emails

When you leave the tracking switch on before sending an email, the extension inserts a 1x1 transparent image in the message and records:

• the subject line;
• the recipient address;
• the sending address and the mail provider (Gmail or Zoho Mail);
• the time the email was sent;
• each time the tracking image is loaded, with the date, the user agent of the requesting client, and a truncated one-way fingerprint of the IP address.

We store a fingerprint rather than the IP address itself, and we use it for a single purpose: recognising when you re-read your own sent message, so that it is not counted as an open by the recipient.

Only when you turn click tracking on

Click tracking is off by default and you enable it yourself, from the tracking dashboard. While it is on, and only for the emails you choose to track, the extension rewrites the links in the message body before it is sent. Each link is replaced by an address on go.getmailcheck.com that redirects to the original destination straight away.

• the destination address of each rewritten link, so we can redirect to it;
• each click, with the date, the user agent of the browser following the link, and the same truncated one-way fingerprint of the IP address used for opens.

Links that are not rewritten: addresses that are not http or https (mailto:, tel:, anchors), and links wrapping an image, such as a signature logo. Nothing is rewritten in an email you did not choose to track, and nothing is rewritten while the setting is off.

We ignore clicks that come from your own address, and clicks that arrive in the first seconds after sending, which are almost always the security scanners that check links before delivery. This keeps the count honest rather than flattering.

Your recipient sees the rewritten address when hovering a link. We use a subdomain that carries our name for exactly this reason: anyone can see where the link goes.

Only when you turn Checky on for an email

Checky is our follow-up assistant. It is available on paid plans and, during the beta, by invitation. When its switch is on in the compose window, at the moment you click Send:

• the extension reads the text of the message you are sending, from the page itself;
• that text is sent to our API and stored encrypted;
• it is deleted automatically after 90 days, and immediately if you turn the setting off;
• it is used for one purpose only: letting the assistant draft a follow-up you can review and send yourself.

The switch is off by default. It appears next to the tracking switch, it is decided per email, and a global setting lets you disable it entirely. If you never turn it on, no message content ever leaves your browser.

When you open a conversation

If you have Checky enabled, the extension looks at the subject line and the sender addresses shown in an open conversation, to detect that someone has replied and stop suggesting a follow-up. It reads those two elements only, and it does not send the content of received messages anywhere.

The check mark in your Sent folder

In the Sent folder of Gmail and Zoho Mail, the extension shows a small check mark next to the recipient of the emails you are tracking: grey when the email is tracked, green when it has been opened. To do this it reads the recipient and the subject that your webmail already displays on screen, and compares them with your own list of tracked emails. This comparison happens inside your browser. Nothing read from that list leaves your machine, and no message content is involved.

What the extension never does

• It does not read your messages when Checky is off.
• It does not read your inbox, your contacts, your calendar or your files.
• It does not request Gmail API access. It has no permission to send, modify or delete anything in your mailbox.
• It does not follow your browsing outside the compose window and the Sent folder of Gmail and Zoho Mail.
• It does not sell, rent or share your data with advertisers.
• It loads no remote code: everything it runs is in the package reviewed by the Chrome Web Store.

Why each permission is needed

Where your data is stored

Tracking data is processed by our own API running on Cloudflare Workers, with the database in Cloudflare D1. Email verification uses servers hosted by OVHcloud in France. The one exception is described above: with Checky on, message content is sent to Hugging Face in the United States for drafting.

How long we keep it

Your rights

You can ask us for access to your data, its correction, its deletion, or a copy in a portable format, through our contact form. We answer within thirty days. You can also lodge a complaint with your national data protection authority; in France, the CNIL.

Recipients of your emails

Open tracking records that a message was opened, not who read it beyond the address you wrote to. Depending on where you are and who you write to, telling recipients that you track your emails may be required. That responsibility is yours as the sender. Every switch can be turned off, per email or globally.

Changes

Any change that widens what we collect will be published here before it ships, and the date at the top of this page will change. See also our general privacy policy and our GDPR page.