Privacy policy

Last updated: 20 August 2026

This policy is written for the Chrome Web Store listing and the in-extension disclosure. It is not legal advice.

Fromensics is a Chrome extension that helps you investigate the sender of a Gmail message you choose. Its single purpose is local sender investigation.

What we access

When you click Investigate Sender, the extension reads from the open Gmail page, on your device:

• Sender address and display name
• Subject and visible date
• Message body and links shown in that message
• Attachment names if Gmail exposes them
• Gmail’s mailed-by / signed-by lines only if you already expanded message details

We do not use the Gmail API and do not request Google account OAuth for this version.

How it is used

That content is used only to generate an investigation report on your device (rules, optional Chrome on-device AI, optional local threat feed).

Chrome’s on-device Prompt API (Gemini Nano) may run on the extracted text inside the side panel. Chrome may download that model. The email is not sent to Fromensics servers for that analysis.

What leaves the device

Strict local mode (default): investigation does not upload the email body, subject, or recipients to Fromensics.

Later optional live checks: may send only a domain, hostname, or similar indicator to DNS/RDAP or a Fromensics proxy — never the full message. Each such lookup will be listed in the report.

Later optional Pro license (Whop): validating a license may send the license key and extension version, not the email.

Storage

The last investigation may be stored in Chrome extension storage on this computer so the side panel can show it. You can remove the extension to delete that storage. We do not operate a central database of analyzed emails.

Sharing

We do not sell email content. We do not use it for ads. We do not let humans read your messages except if required by law or with your explicit request (for example support you initiate).

Limited Use

Fromensics’ single purpose is sender investigation for the Gmail message you select. We collect, use, and transmit only what is needed for that disclosed purpose. We do not sell user data, use it for advertising, or provide it to data brokers.

This version reads the open Gmail page after a user click and does not call Google APIs. If a later version uses information received from Google APIs, that use will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes

If data practices change after install, Fromensics will disclose that in the product before the new practice applies.