Extension Privacy Policy

TL;DR

The extension uses read-only Gmail access to detect subscription billing emails. Results are stored locally in your browser and never sent to any server. You export them to the Trimlane iOS app by scanning a QR code on your own screen. No accounts, no tracking, no telemetry.

Data we access

The Trimlane Chrome extension requests read-only access to your Gmail account via Google OAuth2. It reads email metadata — sender addresses, subject lines, and message headers — to identify billing-related emails such as receipts, invoices, and payment confirmations.

Trimlane never modifies, deletes, or sends emails on your behalf.

Data we extract

From billing-related emails, Trimlane extracts only:

Service name (e.g. Netflix, Spotify)
Billing amount and currency
Billing frequency (monthly, annual, etc.)
Next billing date, when available

What we don't collect

Full email content or bodies
Email attachments
Contact lists or address books
Sender or recipient addresses, beyond domain matching
Browsing history or activity outside Gmail

Where your data goes

Detected subscriptions are stored locally in your browser via chrome.storage.local. This data never leaves your device except when you choose to move it yourself:

QR code export — subscription data is encoded into a QR code on your screen. You scan it with the Trimlane iOS app to import your finds. The transfer happens locally between your screen and your phone's camera — no server is involved.

Third-party services

Supabase — the extension fetches a service catalog (known subscription names and domains) from Supabase. No user data, email content, or personal information is ever sent there — only the catalog is downloaded.
Google Gmail API — used with read-only scope to fetch email metadata. You can revoke access anytime from your Google Account permissions.

Data retention

Detection results in chrome.storage.local are automatically deleted when you uninstall the extension.
No user data is stored on any external server.
No analytics, telemetry, or tracking data is collected.

Google API Services User Data Policy

Trimlane's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your control

Disconnect Gmail access anytime from your Google Account permissions.
Clear all locally stored data by uninstalling the extension.
Inspect exactly what's stored via Chrome DevTools → Application → Storage.

Changes to this policy

If we update this privacy policy, the revised version will be posted at this URL with an updated "Last updated" date.

Contact

Questions about this privacy policy? Reach us at privacy@trimlane.app.