InboxZip Privacy Policy
Last updated: October 26, 2026. This policy covers the InboxZip Chrome extension (“InboxZip”, “the extension”).
In short
- Your emails and attachments are processed only inside your own browser. They are never sent to InboxZip or to any server we run. We do not run a server that receives your data.
- InboxZip has no accounts, no analytics, no advertising and no tracking, and it does not sell or share your data.
- The only information that leaves your browser because of InboxZip is the Pro license key, together with a device name, sent to Polar to check that it is valid and to count your installs.
What the extension does with Gmail
The extension runs on mail.google.com only. When you press Download ZIP, it reads the message list in the Gmail tab you are using (which messages are shown and which have attachments), then fetches each selected attachment from Google using your existing Gmail login, exactly as if you downloaded it by hand. The ZIP file is built in your browser and saved by Chrome to your downloads folder.
In All pages mode (Pro), the extension turns the pages of your Gmail list in the same tab, one after another, and returns the tab to the page you started from when it is finished.
InboxZip does not use the Gmail API, does not ask you to sign in with Google, and does not send, delete or change your email.
What is stored on your device
The extension keeps a small amount of data in Chrome’s extension storage on your computer:
- the number of free exports used today and the date;
- the state of the current export (progress counts and error messages), which does not contain the content of your emails or attachments;
- if you activate Pro, your license key, the identifier of this installation’s activation, a device name such as “Chrome on Linux (a1b2c3)” (your platform plus a random code), and the time of the last check.
You can remove all of it by removing the extension.
Pro licenses and payments (Polar)
Pro is sold through Polar (polar.sh). Checkout happens on Polar’s own website; InboxZip never sees your card or payment details. To confirm a license, the extension sends the license key together with InboxZip’s public product identifiers to Polar’s license validation service. When you activate Pro, it also registers this installation with Polar under the device name above, because a key works on up to 3 installs; you can remove an installation yourself in the Polar customer portal. Pressing Activate again on the same installation reuses the same registration. The extension repeats the check from time to time while it is in use. Like any web request, this exposes your IP address to Polar. Polar handles checkout and license data under its own privacy policy.
Permissions, and why
- Access to
mail.google.com: to read the message list and fetch the attachments you ask for. downloads: to save the ZIP file and confirm that the download finished.storage: for the local data listed above.sidePanel: to show the InboxZip panel next to Gmail.- Access to
api.polar.sh: only to validate a Pro license key.
The extension does not load or run remote code.
Your choices
You can use the free mode without ever contacting Polar. You can remove your license key and all stored data at any time by removing the extension from Chrome.
Changes
If the way InboxZip handles data changes in a meaningful way, this page and the Chrome Web Store listing will be updated, and the date above will change.
Contact
Questions about this policy can be sent to idiosgamecorporation@gmail.com.
InboxZip is an independent product and is not affiliated with Google. Gmail is a trademark of Google LLC.