Privacy Policy

Last updated: November 6, 2026

This policy describes how Personal Mail Forwarder (“the application”), a privately operated desktop utility, handles information. The application transfers email from a mail.com inbox operated by its owner into the owner's personal Gmail account.

Information accessed

The application accesses email metadata, sender and recipient addresses, message bodies, and attachments from the owner's source mailbox.

It uses Google OAuth to obtain permission to import messages into Gmail and to read Gmail message metadata needed to verify imports and prevent duplicates.

Google API permissions

The application requests the following Google API scopes:

  • https://www.googleapis.com/auth/gmail.insert — to import messages into the owner's Gmail mailbox.
  • https://www.googleapis.com/auth/gmail.readonly — to search messages and verify previous imports.

The Gmail read-only permission allows reading Gmail content through the API. However, the application's current recovery workflow primarily uses message searches and metadata verification.

How information is used

Email content is processed solely to transfer messages into the owner's Gmail account. Gmail metadata is used to identify previously transferred messages and verify imports.

Storage

The desktop application stores its OAuth credentials and import history locally on the owner's computer. Email attachments may be downloaded temporarily as part of processing.

This informational website does not collect email content or Gmail authorization tokens.

Sharing

Email data is transferred to Google Gmail at the direction of the account owner. The application does not sell personal information and does not use Gmail data for advertising or marketing.

Security

Local credentials and import history should be protected using operating-system file permissions and appropriate device security, such as account passwords and disk protection. The application and this website have not undergone independent security audits.

Data retention and deletion

Local import records and authorization credentials remain on the owner's device until removed by the owner. The owner can revoke Google authorization at any time through their Google Account security settings. Imported messages remain subject to Gmail's own storage and deletion controls.

Google API Limited Use

The application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to this policy

This policy may be updated to reflect changes in how the application operates. The date above indicates the most recent revision.

Contact

Questions about this policy can be sent to jesselarson000@gmail.com.