Application policy

Privacy Policy

Effective 6 November 2026

This policy describes Mail Monitoring for personal project, a private personal-use application operated by the owner of yd8.ru. Contact: admin@yd8.ru.

The monitoring service is being prepared. The following rules apply when Gmail access is connected and monitoring is enabled.

Google data accessed and used

The application requests the Gmail API permission gmail.modify. This permits reading and modifying messages, managing labels and sending mail across the connected account. It cannot be restricted by Google to a single label. Use a dedicated test Gmail account without personal correspondence.

The application uses synthetic message content, Message-ID, Gmail message IDs, sender and recipient addresses, timestamps, labels (including Spam and Trash), and delivery authentication headers to match test messages, measure delivery, detect spam placement and clean up known tests. It is designed to process only registered monitoring messages and not unrelated correspondence.

Storage and retention

OAuth credentials and refresh tokens are stored with restricted access on the owner’s monitoring server. Results and diagnostic metadata, without full message bodies, are retained for up to 90 days. Test messages are kept for 7 days, then known Gmail test messages are moved to Trash; Gmail’s normal Trash retention applies before permanent deletion. The application does not permanently purge Gmail messages.

Sharing and processing

Google processes mail and API requests. The owner’s monitoring server, hosted by Hetzner, processes monitoring data. The owner’s mail server receives synthetic test messages. Brief operational alerts may be sent to the owner through Telegram, containing delivery status and necessary test identifiers, but not full Gmail message bodies or OAuth credentials.

Google user data is not sold, used for advertising, or used to train AI models. It is not disclosed to other parties except as described here, at the owner’s request, or as required by law. Access is limited to the owner and the infrastructure needed to operate this private tool.

Google API Limited Use

Mail Monitoring for personal project’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revocation and deletion

The owner can stop monitoring and revoke the application’s access from Google Account connections. Revocation prevents further API access but does not itself remove existing messages or local records. To request deletion of stored tokens and monitoring records, contact the operator at the address above. Existing Gmail messages can also be deleted directly in Gmail.

This website

This informational website uses no analytics, advertising, tracking cookies or third-party fonts. Hosting infrastructure may process ordinary request information, such as IP address, requested URL and timestamp, for operation and security. The site does not collect mailbox credentials.

Changes

Material changes to data handling will be reflected on this page before the changed processing begins.