How UnsubSwipe handles your Gmail data
Your email data never touches our database. Everything is processed in real-time and stored only in your browser.
Google servers
Processes unsubscribes
Data stored here only
Why: To scan your inbox for newsletter subscriptions and display them to you.
What we read: Only promotional emails with "List-Unsubscribe" headers or from common newsletter domains.
Why: To mark emails as read or archive them after you unsubscribe (optional feature).
What we modify: Only emails you explicitly choose to unsubscribe from.
Why: Some newsletters require an email to unsubscribe (e.g., "mailto:unsubscribe@example.com").
What we send: Only unsubscribe request emails with subject "Unsubscribe" - nothing else.
Nothing. We don't store any of your email data.
We only store OAuth tokens (encrypted by NextAuth)
Emails you chose to "Keep"
Emails you unsubscribed from
This data is cleared when you clear browser data or log out.
// lib/gmail.ts - Scan function
export async function scanSubscriptions() {
// Fetch emails from Gmail API
const subscriptions = await fetchFromGmail()
// Return directly to client - NO database write
return { subscriptions }
}// components/Dashboard.tsx
const handleKeep = (id: string) => {
// Store in localStorage (your browser only)
localStorage.setItem("keptEmails", ...)
// No API call to save this data
}// app/api/unsubscribe/route.ts
export async function POST(req) {
// Fetch unsubscribe link
const response = await fetch(unsubscribeLink)
// Return success - link is NOT saved
return { success: true }
}No email content is ever stored on our servers - everything is processed in real-time
OAuth tokens are encrypted by NextAuth.js and stored securely
You can revoke access anytime via your Google Account settings
Open source - our code is publicly viewable on GitHub
No third-party analytics or tracking - we don't use Google Analytics, Facebook Pixel, or similar tools
Technically yes (we have gmail.readonly scope), but we only scan promotional emails. Our code filters for emails with "List-Unsubscribe" headers or from domains commonly used by newsletters. We never read personal emails, attachments, or sensitive content.
Your OAuth token is encrypted and stored by NextAuth.js in our database. This is required for the app to function. The token is only used to make Gmail API requests on your behalf and is never shared with third parties.
1. Clear your browser data (this removes all history stored locally)
2. Revoke UnsubSwipe's access via Google Account → Security → Third-party apps
3. This will delete your OAuth token from our database
No. We don't store your email data, so there's nothing to sell. Your OAuth token is only used to access your Gmail on your behalf and is never shared with anyone.
We're committed to transparency. If you have any concerns about privacy, reach out to us.