Email cleanup on your computer.
Understand what the app accesses, what it saves, where requests go, and how to remove your data.
Last updated: October 15, 2026
EmailTamer is a desktop email-cleanup application developed by AppStart LLC. It processes email on your computer. This policy explains the information it accesses, local storage, and the network requests needed to connect an account and unsubscribe. Contact support@appstart.one with questions.
What the app accesses
For Gmail, the app requests one permission: https://www.googleapis.com/auth/gmail.modify. This lets it read messages, create and apply labels, archive messages and mark them read. The app never sends email from your account and does not request the broader permission for permanent deletion.
When you scan, the app reads message identifiers, sender and recipient information, subjects, dates, labels, unsubscribe headers, and message content needed to find unsubscribe links. It also obtains short message previews, which are saved locally and shown in the email preview interface. It does not intentionally download attachments through an attachment-download API or save complete message bodies as a mailbox archive.
EmailTamer works with Gmail only. It does not connect to other email providers.
How information is used
The app groups messages by sender, finds unsubscribe methods, assigns categories using deterministic rules, and displays previews, counts, and subscription statuses. Enabled sender rules run against scanned subscriptions and update local statuses, such as kept or scheduled for cleanup. A scheduled status is not a promise that a background service will delete messages while the app is closed.
When you choose to unsubscribe or tame senders, the app uses the sender’s standard one-click unsubscribe request (RFC 8058) when one is offered, or lists a page for you to open and complete in your own browser. Senders that only offer an email-based unsubscribe are set aside: the app does not email them, and it moves their current and future mail out of your inbox instead. It records each outcome locally. Taming also labels the chosen senders’ mail email-subscription-tamed, archives it and marks it read. A request being accepted or a button being clicked does not guarantee that a sender will stop mailing you.
The app does not use AI or machine-learning services to analyze your messages or choose unsubscribe actions. Subscription detection and method selection are deterministic; website-based unsubscribe steps require your review.
Where information is stored
Account information, OAuth access and refresh tokens, message metadata, short previews, unsubscribe URLs, and sender statuses are stored in a local encrypted SQLite database. On macOS, the app data directory is ~/Library/Application Support/app.emailtamer/. Interface preferences and some local progress information are stored in the app webview's local storage.
The database uses SQLCipher encryption with a random key stored in macOS Keychain. Protect your device, backups, and account; encryption does not protect a compromised unlocked device. Review and redact diagnostics before sharing them.
What uses the network
The app connects directly to your email provider for sign-in, token refresh, scans, mailbox changes, and revoking access when you remove an account. Provider credentials are used with the corresponding provider; they are not sent to AppStart.
An unsubscribe request contacts the sender's published destination and may include a recipient identifier embedded in its URL. An unsubscribe page you choose to open in your browser can also load resources, redirects, or cookies controlled by that website. Those requests are subject to the destination's practices.
The desktop app has no AppStart-hosted mailbox-processing backend and does not upload your inbox to us. We do not receive automatic analytics or crash reports from the app. If you independently email support, we receive what you choose to include; please avoid including credentials or unrelated email content.
How Google user data is shared, transferred or disclosed
AppStart does not receive Google user data. The app has no server, so your Gmail messages, message metadata, previews, tokens and analysis stay on your Mac. AppStart therefore has no Google user data to share, sell, transfer or disclose.
The app transfers Google user data outside Google in one case only, and only when you start it: when you unsubscribe from a sender that supports one-click unsubscribe (RFC 8058), the app sends a request to the unsubscribe address that sender published in its own List-Unsubscribe header. That address is chosen by the sender and may contain an identifier for your subscription. No message content or other email is sent with it. If you choose to open an unsubscribe page, your own browser contacts that website directly.
Google user data is not shared with, transferred to or disclosed to anyone else: not to advertisers, data brokers, analytics or crash-reporting services, AI or machine-learning services, or other users, and it is never sold. If the law required us to disclose information, we could only disclose what we actually hold; because Google user data received through the app never reaches AppStart, that is limited to anything you choose to send us in a support request.
Google API Limited Use
EmailTamer's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google information is used to provide the visible email-cleanup features described here. It is not sold, used for advertising, or used to train generalized AI or machine-learning models. The app sends information outside Google only as needed for the unsubscribe action you initiate. We have no remote access to the app's local database. Any support material you affirmatively share should be limited to the specific issue you want help with.
Removing data and revoking access
Removing a Gmail account in the app first revokes EmailTamer's Google authorization, then deletes its account row, stored tokens, associated message records, unsubscribe links, subscription records and activity log from the active local database. It does not undo changes already made in your mailbox, erase independent backups, or remove global interface settings and sender rules. If Google cannot be reached, the app still deletes the local data and keeps only the token needed to revoke access, encrypted, retrying the revocation each time it starts until Google confirms. SQLite deletion is not a guarantee of forensic erasure from disk or backups.
You can also remove EmailTamer's Gmail access at any time in your Google Account connections. Provider-side revocation stops future authorized access; it does not erase the app's existing local records.
Uninstalling the application may leave its data directory and webview storage behind. Remove connected accounts first. To remove remaining local data, quit the app and remove its application data directory and associated app storage; keep any backups only if you intend to retain that information.
This website
The emailtamer.app website is separate from the desktop app. Nothing on the website can access your mailbox, and the app does not send data to the website. The site is hosted by Cloudflare, which receives ordinary web requests, including your IP address. The site loads fonts from Google Fonts, so your browser may contact Google to display them. The homepage's demo video is hosted on YouTube. It loads from YouTube's privacy-enhanced mode (youtube-nocookie.com) only when you press play, and YouTube's privacy policy then applies to that playback.
If you request early access, we store the email address you enter, the optional mail provider and note you choose to add, the country Cloudflare associates with your request, and the date, in a Cloudflare D1 database controlled by AppStart LLC. We use this only to contact you about EmailTamer availability and do not sell or share it. We keep it until early access ends or you ask us to delete it by writing to support@appstart.one.
The website uses Amplitude analytics to understand visits: pages viewed, the page or campaign that referred you, early-access button clicks and form submissions (not what you type), and browser, device type and approximate location. Amplitude stores a random identifier in your browser to recognize repeat visits, and we configure it not to store your IP address. Analytics does not load if your browser sends a Global Privacy Control or Do Not Track signal, and you can also block it with a content blocker. The desktop app contains no analytics.
Contact and changes
AppStart LLC maintains EmailTamer. Questions about data handling can be sent to support@appstart.one. We will update this page when the described behavior changes and identify the revision date above. This policy describes the app; your email provider and unsubscribe destinations have their own policies.