ICARUS Mail Organizer Privacy Policy
Published by: ICARUS Mail Organizer
Contact: gavindj2022@gmail.com
Effective date: September 8, 2026
ICARUS Mail Organizer creates the Gmail labels and label-only sorting rules you select. It does not read your message content.
What we ask permission for
Exactly two Google permissions:
| Scope | Why |
|---|---|
gmail.labels | To list your label names and create the ICARUS labels you selected. |
gmail.settings.basic | To list your filter settings and create the label-only sorting rules you selected. |
We do not request, and therefore cannot perform, any operation that reads message content, sends email, creates drafts, deletes or archives email, marks email read, or configures forwarding.
How Google access is handled
This is a one-time setup, not an always-connected app.
- You choose categories and approve permissions on Google's screen.
- Google issues a short-lived online access token. No refresh token is requested.
- The access token stays in Worker memory only while ICARUS creates your labels and rules. It is never written to a database, log, file, browser page, or result URL.
- ICARUS asks Google to revoke the token after success or failure.
The completion page tells you whether Google confirmed the disconnect. If it did not, the page links directly to Google Account connections so you can remove ICARUS yourself.
Setup security and cookies
Each click creates a one-time setup session that expires after 10 minutes. The session is tied to the same browser with a secure, HttpOnly, SameSite cookie and uses PKCE. The raw Google state value and raw browser value are never stored. The short-lived PKCE verifier is cleared as soon as the callback is claimed.
What we store
For a regular setup, Cloudflare D1 stores:
- The category IDs you selected
- Hashed one-time security values
- Setup status, timestamps, and label or rule counts
- A shortened error message if setup fails
The optional private invite dashboard can also store the name and email entered by the sender, plus invitation events. Older private-beta invitation events may include the browser user-agent recorded when a link was opened.
We do not store your emails, message content, contacts, existing labels, existing filters, Google access token, authorization code, or client secret. Cloudflare provides the hosting, Worker, and D1 infrastructure used to process the setup request.
Setup records are kept for reliability and security review until removed after a deletion request. To request deletion, email gavindj2022@gmail.com.
Limited Use disclosure
ICARUS Mail Organizer's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or allow humans to read it except when required for security, support requested by the user, or compliance with law.
Removing what was set up
Delete ICARUS rules under Gmail Settings, Filters and Blocked Addresses. Then delete the ICARUS labels under Gmail label settings. ICARUS never removes mail.
Changes
Material changes to this policy will be reflected in the effective date above.