Privacy Policy

Last updated: June 30, 2025

CodeFill is a Chrome Extension that helps users quickly extract verification codes from their Gmail inbox and copy them to their clipboard for easy use during sign-in processes.

What Information We Access

CodeFill requests the following data:

• Access to your Gmail inbox (read-only) via the https://www.googleapis.com/auth/gmail.readonly scope.
• Your basic Google profile (email and name) for login verification.
• Clipboard access to automatically copy your verification code.

How We Use Your Data

We use your data only for the following purposes:

• To scan recent emails and extract verification codes sent by services you log into.
• To automatically copy the extracted code to your clipboard for faster login.
• To maintain login session information locally in your browser.

Data Protection and Security

Security procedures are in place to protect the confidentiality of your Google account data. Our app communicates with the backend securely via HTTPS to prevent interception during transit. However, we do not store your Google data (such as access tokens or email data) on our servers.

All authentication and token handling is managed on your device using using OAuth2. Your access and refresh tokens are stored locally in your browser’s storage (e.g., Chrome Local Storage). This means:

• Your sensitive tokens remain on your device only and are not transmitted to any third-party servers.
• We do not persist or log any Google user data on our backend.
• We rely on the browser’s built-in security to protect stored data, and we do not access it unless explicitly triggered by your actions.

Data Storage and Retention

CodeFill stores your Google access token temporarily in your browser's local storage (chrome.storage.local), used only to fetch verification codes. No data is stored externally or on our servers, and your inbox contents are never saved, logged, or shared.

Third-Party Services

We use Google APIs to access Gmail content with your permission. Authentication is handled through OAuth2 and the Chrome Identity API.

Your Consent

By installing and using CodeFill, you consent to the access and usage of your Gmail account data as described in this policy.

Data Sharing

We do not share or sell your data to any third parties. All processing occurs on-device.

Contact

If you have questions or concerns about this privacy policy, please contact us at codefill@uarham.me.

Changes to This Policy

This policy may be updated periodically. We recommend checking this page occasionally to stay informed.