Privacy policy

Last updated October 19, 2026

AttachmentDownloader (the "app", at attachmentdownloader.vercel.app) helps you find attachments in your Gmail and download them as a ZIP. This page explains what it accesses and keeps.

What the app accesses

When you sign in with Google, the app asks for:

• Your basic profile: name, email address and profile picture, used to sign you in.
• Read-only Gmail access (gmail.readonly), used only to search your messages for attachments, list your labels so you can filter by them, and download the attachments you choose.

The app can't send, change or delete any email.

What the app stores

• Your account: the name, email address and picture from Google.
• An encrypted Google refresh token, which lets the app reach Gmail for you without asking you to sign in each time.
• Your latest search: the search query and, for each matching attachment, its filename, file type, size, sender, subject and date. Starting a new search deletes the previous one, and every search is deleted automatically after 30 days.

The app does not store attachment contents or email bodies. Your browser downloads attachment files directly from Google's Gmail API and builds the ZIP on your device.

How your data is protected

The refresh token is encrypted with AES-256-GCM before it is stored and never reaches your browser. All traffic uses HTTPS. Each account can only read its own searches.

Who processes your data

The backend runs on Convex, which stores the data above. The website is hosted on Vercel. The app uses no advertising or analytics trackers, and doesn't sell or share your data with anyone else.

Google API Services User Data Policy

The app's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to show you your attachments and download them. It isn't used for advertising, isn't read by people, and isn't used to train AI or machine-learning models.

Removing access and deleting data

• Click Disconnect Gmail in the app. This revokes the app's access with Google and deletes the stored token and your search results.
• You can also remove the app at any time from your Google Account's third-party connections.
• Click Delete account in the app to revoke Gmail access and permanently delete everything the app stores about you: your account, sign-in records, token and search results.

Contact

Questions about this policy or your data: open an issue on GitHub.

Changes

If this policy changes, the date at the top of this page will change too.