Introduction
Trick Plus ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Information We Collect
Google Account Information
When you sign in with Google, we collect your basic profile information (email address, name, and profile picture) and authorization credentials to interact with Gmail on your behalf.
Google API Scopes
Our extension requests the following permissions to access your Google data:
- Email address and profile information (userinfo.email, userinfo.profile) — to identify your account
- Gmail labels (gmail.labels) — to create and manage labels associated with your aliases
- Gmail settings (gmail.settings.basic) — to create and manage email filters for your aliases
Email Aliases
Our extension helps you create and manage email aliases using the Gmail "plus trick" (e.g., youremail+alias@gmail.com). We collect and store your Gmail address and aliases on our secure servers to provide synchronization across devices and enhanced functionality. For each alias, we store the alias name, description, status, and associated Gmail label and filter identifiers.
Error Monitoring
We use a self-hosted Sentry instance on our servers to collect error reports and diagnose issues. This data is used solely to maintain and improve the reliability of our service and is not shared with third parties.
Browser Data
The extension stores your authentication token in the browser's local storage to keep you signed in between sessions.
How We Use Your Information
We use the collected information for:
- Providing and maintaining our service
- Creating and managing Gmail labels and filters on your behalf
- Synchronizing your aliases across devices
- Improving user experience
- Monitoring and fixing errors to improve service reliability
Data Sharing, Transfer, and Disclosure
We do not sell, rent, or trade your personal information or Google user data to any third parties.
We may share your information only in the following limited circumstances:
- Google APIs: We send requests to Google's Gmail API to create, update, and delete labels and filters in your Gmail account. This is done solely to provide the core functionality of our service.
- Legal requirements: We may disclose your information if required to do so by law, or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud, or protect the personal safety of users or the public.
- Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
Google API Services User Data Policy
Trick Plus's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we:
- Only use Google user data to provide and improve the user-facing features of Trick Plus
- Do not use Google user data for serving advertisements
- Do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with applicable law, or for our internal operations (and the data is aggregated and anonymized)
- Do not transfer Google user data to third parties except as necessary to provide the service, for security or legal purposes, or as part of a merger/acquisition with adequate user notice
OAuth Token Storage
To provide our service, we store your Google OAuth access token and refresh token on our secure servers. These tokens allow us to manage Gmail labels and filters on your behalf without requiring you to re-authenticate each time. Tokens are only used to perform actions you have authorized through the extension. You can revoke access at any time by removing Trick Plus from your Google account permissions.
Data Security
We implement appropriate security measures to protect your information. All data is encrypted in transit using TLS/SSL with HTTPS-only connections. We use token-based authentication and apply security headers (HSTS, X-Frame-Options, X-Content-Type-Options) to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction.
Third-Party Services
Our service integrates with the following third-party services:
Our extension integrates with Gmail via Google's APIs to manage your email labels and filters. Please refer to Google's Privacy Policy for information about how Google handles your data.
Your Rights
You have the right to:
- Request access to your personal information by contacting us
- Request correction of inaccurate information
- Request deletion of your information from our servers
- Request export of your data
- Revoke our access to your Google data at any time via your Google account permissions
- Uninstall the extension at any time
Data Retention
We retain your personal information, email aliases, and authorization credentials on our servers for as long as your account remains active or as needed to provide you services. When you delete an alias, it is marked for deletion and permanently removed after 30 days. You may request deletion of all your data at any time by contacting us. Upon account deletion, we will remove all your personal data, aliases, and authorization credentials from our servers.
Changes to This Policy
We may update this Privacy Policy from time to time. We will try to notify users of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your rights, please contact us at: