Privacy

What we collect from you

You sign in with your Google account through Firebase Authentication, a Google service, so we never see or store a password. Three things come back and we keep them: your name, your email address and your profile picture, alongside the account identifiers Google and Firebase use for you. When you set up a tracked email we store the subject, and the recipient and note if you choose to add them. Those labels are for your dashboard only and are never sent to anybody.

What we collect about your recipients

When a tracked email is opened, the request for our tracking image carries three things and we keep all three:

• The time the request arrived, to the millisecond.
• A one-way hash of the requesting IP address. We never store the address itself, and the hash cannot be reversed into one. It exists so we can tell two different openers apart.
• The user-agent string the mail client sent, which is how we work out whether it was a phone, a desktop or a mail provider’s proxy.

What we never have

Signing in grants us exactly three things, and they are the identity ones: your basic profile, your email address, and the confirmation that the sign-in was really you. We ask for no Gmail permission at all, which is why Seenbox cannot open your mailbox even in principle. There is no IMAP password and no browser extension either.

So we have no access to your inbox, your sent folder, your drafts, your contacts or the body of any message you send, and we could not read them if we wanted to. You can revoke our access at any time from your Google account permissions page.

We also never sell data, never share it with advertisers, and never use your account for training anything.

How long we keep it

Receipts on a free account are kept for 30 days and then removed. On a paid account they are kept until you delete them. Deleting a tracked email deletes every receipt attached to it immediately and permanently, and closing your account removes everything we hold about you.

Cookies

We set one cookie, and only after you sign in. It holds a random session token so the site knows it is you, it is marked HttpOnly so no script can read it, and it expires after 30 days. We run no advertising or analytics cookies of any kind.

Your rights and your recipients’ rights

You can export or delete everything on your account at any time from your settings. Because we hold only a hashed IP address for your recipients, we cannot identify an individual recipient on request, which is a deliberate design choice rather than a limitation.

Depending on where you and your recipients are, telling people that you track your email may be a legal requirement rather than a courtesy. The visible Seenbox line on the free plan exists partly for that reason. Using the product responsibly is your call to make.

Getting in touch

Questions about any of this, or a request to remove data, can go to privacy@seenbox.app and we will answer within a few working days.