Privacy Policy

Last updated: December 2025

Overview

The Gmail Attachment Downloader is a local Python application that helps you download attachments from your Gmail account. This privacy policy explains how the tool handles your data and what information is collected, stored, or transmitted.

Data Collection and Storage

No data is kept on any server or stored in the cloud. All processing happens entirely on your local computer. The tool:

• Uses the Gmail API to access your emails (with your explicit OAuth2 authorization)
• Downloads attachments directly to your local machine
• Stores OAuth2 credentials and tokens locally on your computer
• Organizes downloaded files into local folders on your device

All credentials, tokens, and downloaded files remain on your local computer and are never transmitted to any external server except Google's Gmail API (which you authorize).

Gmail API Usage

The tool uses Google's Gmail API with read-only access. When you authenticate:

• You grant the application permission to read your Gmail messages
• This access is limited to reading emails and downloading attachments
• You can revoke this access at any time through your Google Account settings
• The application uses OAuth2 for secure authentication

All API requests are made directly from your computer to Google's servers. No intermediate servers are involved in the process.

Local Data Storage

The following data is stored locally on your computer:

• OAuth2 Credentials: Stored in credentials-{account}.json files
• OAuth2 Tokens: Stored in token-{account}.json files
• Project Configuration: Stored in projects_config.json
• Downloaded Attachments: Stored in account-specific folders on your local filesystem

None of this data is transmitted to external servers or stored in the cloud. You have complete control over these files and can delete them at any time.

Security

The tool implements the following security measures:

• Uses OAuth2 for secure authentication with Google
• Read-only access to Gmail (cannot modify or delete emails)
• All credentials and tokens stored locally (not in cloud storage)
• No network transmission of downloaded attachments

However, you are responsible for securing your local files, including credential files and downloaded attachments. We recommend keeping these files in a secure location and not sharing them with others.

Third-Party Services

The tool only interacts with Google's Gmail API. No other third-party services are used. Google's privacy policy applies to data accessed through their API. You can review Google's privacy policy at: https://policies.google.com/privacy

Your Rights

You have the right to:

• Revoke API access at any time through your Google Account settings
• Delete all local credential and token files
• Delete all downloaded attachments
• Stop using the tool at any time

To revoke access, go to: https://myaccount.google.com/security and remove the application from "Third-party apps with account access".

Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date.

Contact

If you have questions about this privacy policy or how the tool handles your data, please refer to the project documentation or source code.

← Back to Home