← Back to Mail Town

Privacy Policy

Last updated 2026-07-10

Mail Town is a personal, single-user desk-and-postbox front end for Gmail. It is not a commercial product, it is not offered to the public as a service, and it does not have user accounts of its own — it connects to exactly one Google account at a time, chosen by whoever deploys it.

What Google data it accesses

When you connect Gmail, Mail Town requests two Google OAuth scopes:

  • gmail.modify — to read recent inbox messages and organize them (archive, trash, restore, mark read, snooze). This scope cannot permanently delete mail; every action maps to a reversible Gmail label change, the same as using Gmail itself.
  • gmail.send — to send replies you compose inside the app, threaded into the original conversation.

Mail Town never requests a scope that can permanently and irrecoverably delete mail, change your account settings, or access anything outside Gmail.

How your data is stored

  • OAuth tokens are stored only in httpOnly, secure browser cookies on your own device. They are never written to a database, log, or third-party server.
  • Message content is fetched live from Gmail when you open the mailbox and is not persisted anywhere by the app.
  • Local "physical" workflow state — which pile a letter is sorted into, snooze return times, and in-progress draft replies — is stored only in your browser's local storage, scoped to your device.
  • Remote images embedded in email bodies are blocked from loading by default.

Data sharing

Mail Town does not sell, share, or transmit your data to any third party. There is no analytics, advertising, or tracking of any kind. The only network calls it makes on your behalf are directly to Google's Gmail API.

Revoking access

You can disconnect Gmail at any time from inside the app — open the mailbox and use "Disconnect Gmail and revoke access" at the bottom, which revokes the token with Google and clears local cookies immediately. You can also revoke access at any time from your Google Account permissions page.

Changes to this policy

If this policy changes, the "Last updated" date above will change with it.

Contact

Questions about this policy or your data can be sent to mikemangialardi94@gmail.com.