Privacy policy

Last updated: 19 October 2026.

Who we are

Scrub My Inbox is operated by Techinco company, 12 Goodge St, London W1T 2QB, who is the data controller for the personal data described here. Contact: codtheatreshot@gmail.com.

What Scrub My Inbox does

It lists the senders of bulk email in your mailbox and, when you ask it to, unsubscribes you from them or moves their messages to your Trash.

What we access

• Your email address, to identify the mailbox you connected.
• Message headers only: sender name and address, List-Unsubscribe, List-Unsubscribe-Post, List-ID, Date and Message-ID. We never read message subjects, bodies or attachments.
• Your sign-in: an access token from Google or Microsoft, or an app password you enter for other providers. It is held only in server memory for your session.

What we do on your behalf, only when you click

• Unsubscribe: we send the sender's standard one-click unsubscribe request, or send the unsubscribe email the sender asks for from your account (it appears in your Sent mail), or open the sender's unsubscribe page in your browser.
• Delete all: we move that sender's messages to your Trash. We cannot permanently delete email. You can undo until you disconnect.

What we keep

Nothing about your mailbox is stored. When you disconnect, after 30 minutes of inactivity, or after 2 hours at most, your session is deleted from memory and Google sign-ins are revoked.

For security we keep a short audit log of actions: time, an anonymous session reference, the action, the sender's domain (for example newsletter.com), a message count and the result. It never contains your email address, message content or credentials. It is kept for 30 days.

Google user data

Scrub My Inbox's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to provide the features above. We do not sell it, use it for advertising, use it to train AI models, or let anyone read it.

Lawful basis

We process your data to provide the service you asked for (contract), and keep the audit log for the security of the service (legitimate interests).

Who else is involved

• Fly.io hosts the service in London, United Kingdom.
• Google or Microsoft, if you sign in with them.
• Senders you unsubscribe from receive the unsubscribe request, as they would if you clicked their link yourself.

Your rights

Under UK GDPR you can ask for access to, correction or deletion of your personal data, object to processing, or complain to the Information Commissioner's Office (ico.org.uk). Contact codtheatreshot@gmail.com.

Revoking access

Disconnect in the app at any time. You can also remove Scrub My Inbox from your Google account or Microsoft account, or delete the app password you created.