Privacy policy

Version 2.1.0 · applies to Peapod 0.11 and later · last updated 31 October 2026

Who is responsible

Peapod is made by Dileepa Ranawake, a sole trader in Hull, UK. I'm the data controller for anything you choose to send me, and for the licence data described below.

Contact: [email protected]

What it's for

One purpose: preview Gmail attachments inside Gmail, so you can check it's the right file before you send.

What it reads in Gmail, and why

It runs only on mail.google.com.

When you click Preview on an attachment, in a draft or an email you've opened, it fetches that one file from Gmail, using your own signed-in session, the same way Gmail's download link does.

It shows the file in the page, from memory. When you close the preview, the copy in memory is released.

It reads the names of the attachments in that draft or email, to label the preview. It does not read your email text, contacts or other messages.

What it keeps on your device

Stored by Chrome on this device only, never synced:

• how many previews you've done, to show the time saved
• the date you installed it, for the 7-day trial
• on the free plan: how many files you previewed today (a number and the date, not which files)
• a random id for this browser, like peapod-3f9a1c07, made on your device
• if you add one: your licence key, its plan, status and expiry date, and when it was last checked

Remove the extension and all of this goes. "Remove from this browser" in Peapod's settings removes the key and frees its place.

The licence check

Only if you add a licence key. During the trial and on the free plan, Peapod sends nothing.

When you click Activate, Chrome asks your permission for Peapod to contact keys.dileeparanawake.com, my own licence server. Peapod then sends two things: your key, and the random id for this browser. Once when you activate, then at most once a day while you use Peapod, and once when you remove it. Nothing about your email, your files or your Gmail account is sent.

What the licence server keeps: a scrambled copy (a hash) of each key, never the key itself; its plan, status and expiry; the Stripe reference numbers that change its status (customer, subscription or payment, and the checkout); and the random ids of the browsers using it (up to 3). No names and no email addresses are stored. Your key waits there for at most 24 hours, only so the page after checkout can show it to you once.

Like any website, the server sees your IP address to answer. It uses it only in memory, to stop abuse (a limit on requests), and never writes it down.

Why: to give you the plan you paid for (to perform our contract).

How long: while your licence is active, plus 12 months.

If you buy

Stripe sells Peapod. Payments go through Stripe Managed Payments. Stripe is the merchant of record: it sells to you, takes payment, handles tax, refunds and receipts, and your purchase shows as "Sold through Onelink", Stripe's checkout. Checkout, your card and your receipts are with Stripe and Onelink, under Stripe's privacy policy, as a controller in its own right. Your card details never reach me or the extension.

What I can see, and why. In my Stripe account I can see your name, email, country and the plan you bought. I use them only to support your licence and handle refunds (to perform our contract), and to keep tax and accounting records (a legal obligation). I don't add you to any mailing list.

Refunds. Full refund within 14 days, no questions: email me, or ask Onelink support. See the licence terms.

How long. Records in my Stripe account: up to 6 years, for tax records. You can also ask Stripe to delete your Onelink account and order data.

Your key by email

When you buy, Stripe tells my licence server about the sale. That includes the email address you gave at checkout.

The server uses that address once, to email you your key. It sends the email through Resend, an email delivery service. The email comes from [email protected], and replies come to me.

What I keep: the licence server does not store your address. It uses it for that one send and forgets it.

What Resend keeps: a delivery log of the email, which includes your key, for 30 days. Resend says it keeps email data for 30 days on its standard plans. Resend processes this for me as a processor. It is a US company and processes data in the US. Its data processing agreement covers transfers from the UK with the UK addendum to the standard contractual clauses, and it says it complies with the UK Extension to the EU–US Data Privacy Framework.

Why: to deliver what you bought (to perform our contract).

How long: I keep nothing. Resend deletes its log after 30 days.

If you tap 👍 or 👎

Under each preview, "Useful?" has 👍 and 👎. If you tap one, Peapod sends your answer, the file's type (like .pdf, not the file or its name) and the version. If you also type a note and press Send, it sends that too. It goes to my feedback server, run on Cloudflare. No cookies, no id, no IP address kept.

Why: to see what works and fix what doesn't. That is my legitimate interest, and you choose whether to tap.

How long: I delete it within 12 months.

What it never does

• No analytics, tracking or ads. It sets no cookies.
• No remote code: everything it runs is in the package.
• No file, file name or email text is saved to your device or sent anywhere.
• It contacts no server except the two above, and only when you choose to.

If you choose to email me

Two links open an email in your own mail app, written out for you. Nothing is sent until you press send there, and you can read or change it first.

• "Didn't look right?" in a preview: the file's type (like .pdf) and the extension's version. Not the file or its name.
• The page after you remove it: your reason, anything you write, whether I may contact you about it, the version you had, and the date and time.

Your mail app also sends your email address and name, as with any email.

Why: to fix problems and improve Peapod. That is my legitimate interest, and you choose whether to send. If you say I may contact you, I'll reply about your feedback only. If you say no, I won't.

Where it's kept: my Gmail inbox, which Google stores for me. Only I read it. It is never sold, shared or added to a mailing list.

How long: I delete feedback emails within 12 months, or sooner if you ask.

If you remove it

Chrome opens a short page on my site asking why, if you'd like to say. The extension adds only its version number to that address (like ?v=0.9.0): no ID and nothing about you.

These web pages

This page and the removal page are on my website, hosted by Cloudflare. Like any website, the host handles your IP address to deliver the page. The site counts visits with Cloudflare Web Analytics, which sets no cookies and does not identify you.

Why: to deliver the page and count visits. That is my legitimate interest.

How long: Cloudflare keeps this in line with its own policy. I see only totals.

Who handles it for me

Cloudflare runs this website, my licence server and my feedback server. It handles that data for me as a processor.

Resend emails your key when you buy, as described in Your key by email. It handles your email address and the key for me as a processor.

Stripe is the merchant of record for purchases, and a controller in its own right for them, under its privacy policy.

Feedback emails go to my personal Gmail. For that, Google is a controller in its own right, under Google's privacy policy.

Cloudflare, Google and Resend are US companies and may store data in the US. Cloudflare and Google are both certified to the UK–US data bridge. If Cloudflare's certification lapsed, its terms fall back to the UK's standard contract clauses.

Limited Use

The use of information received from Gmail pages adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. It is used only to show the preview you asked for and the counts above. It is never transferred, sold, used for ads or credit checks, or read by people.

Permissions

• storage: keeps the things listed above on your device.
• Access to https://mail.google.com/ only: to add the Peapod tray and show the file you click.
• Optional, asked for only when you activate a key: https://keys.dileeparanawake.com/, to check it.

Your rights

Under UK data protection law you can ask me for a copy of anything I hold about you, and ask me to correct or delete it, or to stop using it. Email [email protected]; I'll reply within one month.

You can object to my using your feedback at any time: email me and I'll stop.

What's on your device is yours: removing the extension deletes it. For licence data, email me with your key or order email and I'll find it.

If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office (ICO).

Changes

If what the extension does with data ever changes, this page changes first, and the date above changes with it.