Privacy Policy
Last updated: July 23, 2026
whichphone ("we", "us", or "our") operates the website whichphone.xyz and provides a Gmail inbox organization tool. This Privacy Policy explains how we collect, use, and protect your information when you use our service.
Information We Collect
When you sign in with Google, we receive an access token that allows us to interact with your Gmail account on your behalf. We also store your email address to display it in the app interface.
We do not:
- Store your emails, email content, or attachments on our servers
- Create a permanent user account or database record
- Share, sell, or rent your personal information to third parties
- Use your Gmail data for advertising, profiling, training AI models, or any purpose other than the features you explicitly request
Google Services & Gmail Access
If you choose to connect your Gmail account, the app uses Google Sign-In and requests the minimum necessary scope: https://www.googleapis.com/auth/gmail.modify
This scope is used exclusively for the following user-initiated email cleaning features:
- Move emails you select to the Trash folder — one by one or in batches of up to 100 — from folders such as Spam, Promotions / newsletters, Social, Updates, and similar categories.
- Detect subscription senders (for example newsletters and social media mail like Facebook, Instagram, etc.) and help you unsubscribe from them — one by one or in batches of up to 100 — when you choose to do so.
Important limitations:
- These are the only Gmail actions the app performs. It does not send emails, read your full inbox for other purposes, or reorganize mail beyond moving selected messages to Trash or unsubscribing when you ask.
- The app never performs any action automatically.
- All deletions (move to Trash) and unsubscribes require your explicit confirmation.
- We do not store your emails, email content, or attachments on our servers.
- We only access the minimum metadata and information necessary to provide these cleaning and unsubscribe features.
- We do not use your Gmail data for advertising, profiling, training AI models, or any purpose other than the features explicitly requested by you.
Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke our access to your Gmail account at any time from your Google Account Permissions.
We also request userinfo.email to display your connected Google email address in the dashboard.
Data Storage and Session
Your access token is stored in an encrypted HTTP-only cookie for the duration of your session. When you sign out, all session data is immediately deleted. We do not maintain any database or persistent storage of your information.
Data Retention
We retain no personal data beyond your active browser session. Signing out or closing your browser clears all stored tokens.
Security
We use HTTPS encryption for all communications. Access tokens are stored in secure, HTTP-only cookies and are never exposed to client-side JavaScript.
Your Rights
You can at any time:
- Revoke whichphone's access via your Google Account settings
- Sign out of whichphone to clear your session
- Contact us with questions about your data
Children's Privacy
whichphone is not intended for users under the age of 13. We do not knowingly collect information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.
Contact
If you have questions about this Privacy Policy, please contact us at privacy@whichphone.xyz.