Sheet Mailer — Privacy Policy
Last updated: 31 October 2026
Sheet Mailer is a browser extension that captures LinkedIn hiring posts into a Google Sheet you own, and sends email from your own Gmail account.
The short version
Sheet Mailer has no server. Your data travels from your browser to Google's APIs under your own account, and nowhere else. The developer cannot see your Sheet, your email, your contacts, or anything you capture.
What is stored, and where
All of it stays in your browser's extension storage, on your own device:
| Data | Why it exists |
|---|---|
| Google OAuth access token | To call the Sheets and Gmail APIs as you |
| Your Google account email address | Shown in the UI so you know which account is active |
| Spreadsheet link, template text, role list, sending limits | Your settings |
| Résumé files you upload | Attached to outgoing mail when you enable attachments |
| The Drive folder link and the file names found in it | So a résumé can be matched to a role. File contents are fetched per send and not retained |
| A per-day count of messages sent | To enforce your own daily cap |
| Demo-mode rows and outbox, if you use demo mode | A local sandbox; never sent anywhere |
Captured post details — the author's name and profile URL, the post URL and text, and any email address found in the post — are written to your Google Sheet. They are not retained by the extension beyond the moment of writing.
What is transmitted, and to whom
Only to Google, only as you, only to these endpoints:
sheets.googleapis.com— reading and writing your spreadsheetgmail.googleapis.com— sending your emailwww.googleapis.com— your account's email address, and the résumé files in the Drive folder you nominate, if you use that optionoauth2.googleapis.com— revoking the token when you sign outaccounts.google.com— the sign-in screen itself
There is no developer-operated server, no analytics, no telemetry, no crash reporting, and no third-party service of any kind. Nothing is sold, shared, or used for advertising. Nothing is used to train any model.
Permissions
| Permission | Purpose |
|---|---|
identity | The Google sign-in flow |
storage | Keeping the settings and files listed above |
activeTab + scripting | Reading the LinkedIn post you are looking at, only when you click the toolbar icon |
| Google API hosts | The endpoints listed above |
linkedin.com (optional) | Requested only if you switch on the feed button. Declined or unused, the extension has no access to LinkedIn at all |
LinkedIn data
The extension reads a LinkedIn post only when you ask it to — by clicking the toolbar icon on a post, or the feed button if you enabled it. It reads only what is already rendered on the page in front of you. It does not browse, crawl, scroll, paginate, or call LinkedIn's APIs, and it never reads LinkedIn in the background.
Your Google data, and Google's Limited Use rules
Sheet Mailer's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Four scopes are requested:
spreadsheets— to append captured rows and write send status back. Write access is required because the extension recordsSENT,INCOMPLETEand error states in your sheet.gmail.send— to send your outreach. This scope can only send; it cannot read, search, or modify your mailbox.drive.readonly— to read the résumé files from the Drive folder you nominate, so that replacing a file in that folder is picked up without reconfiguring anything. Stated plainly: this scope grants read access to your whole Drive, which is more than the extension uses. It reads only the folder whose link you enter in settings, and only when attachments are switched on. If you would rather not grant it, leave the folder link empty and upload résumé files directly in settings instead — that path uses no Drive access at all, and the extension never asks Google for the folder.userinfo.email— to display which account is signed in.
Deleting your data
- Sign out in the extension's settings: the token is revoked with Google and removed locally.
- Clear demo data in settings removes demo rows and the demo outbox.
- Remove résumé files individually in settings.
- Uninstall the extension: the browser deletes all of its stored data.
- Your spreadsheet and sent mail live in your Google account and are yours to delete there. Revoke the extension's access any time at myaccount.google.com/permissions.
Children
Not directed at children under 13, and it collects nothing from them.
Changes
Material changes will be published at this URL with a revised date above.