Open Sweep

Privacy Policy

Last updated: August 2026
Privacy at a glance

Sweep can access

Sender name and address
Subject line and date
Gmail labels and whether attachments exist

Sweep never reads

The body of your emails
Your attachments — unless you open one yourself
Anything after your session ends

Stays on your device

Your review session — in your browser, cleared when it ends
Theme and progress — local storage only
One temporary session cookie while signed in

The only data Sweep keeps

Three anonymous counters — a rating total, a cleanup count and a first-time connection count, not linked to you
No inbox content, no attachment files, ever, on Sweep servers

Who I am

I built Sweep in Stockholm, Sweden. It is a one-person project with no investors and no ads. Contact: hello@trysweep.dev

What Sweep accesses

When you connect your inbox, Sweep's scan reads only email metadata — sender names, addresses, subject lines, and dates — never the body of your emails. Sweep also needs permission to move mail to your trash, so it asks for a little more than read-only access. The one time Sweep handles a file from a message is when you choose to preview an attachment, described below.

Previewing an attachment

When you tap to preview an attachment, Sweep retrieves that single file from Gmail through the app and shows it to you in your browser. It is only ever the file you chose, only when you ask. The file is streamed to your screen, held in memory only long enough to display it, and never stored by Sweep — close the preview and it is gone.

What happens to your data

Sweep processes inbox information only for your active session. Your review session stays in your browser, while Sweep's app service processes requests temporarily in memory. Sweep processes the Gmail metadata it needs temporarily, in memory, to serve your active session; it does not persist inbox content or attachment files in any Sweep database or storage. The only data Sweep keeps is three anonymous counters — a running total of ratings, a count of completed cleanups and a count of first-time connections — which hold nothing from your inbox and nothing that identifies you.

What Sweep changes in Gmail

Sweep only moves emails to your Gmail trash when you explicitly choose to. Trashed emails remain recoverable in Gmail for 30 days, after which Gmail removes them automatically. Sweep never permanently deletes anything itself.

Cookies and storage

Sweep uses one temporary session cookie to keep you logged in during your cleanup session. Your theme preference and review progress are saved in your browser's local storage — they never leave your device. There are no tracking cookies.

Analytics

Sweep uses privacy-friendly, cookieless analytics (Vercel) to understand how the app is used — anonymously. This includes page visits and a few anonymous usage events, for example that a scan finished or a sender was cleared. These events record only that an action happened — never who you are, never your email address, and never anything inside your inbox. No personal data, no identifying cookies, no ad tracking.

Support

Sweep is free — every user gets the full app. If you enjoy it, you can support the project on Ko-fi. Payments are handled entirely by Ko-fi — Sweep never sees or stores your card details, and supporting does not unlock features or change how Sweep works.

Google API Limited Use

Sweep's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the features described on this page — never for advertising, never sold, never used to train models.

Feedback

When you rate Sweep with the hearts, the only thing recorded is an anonymous number — your rating is added to a running total so the landing page can show an average. Sweep also keeps an anonymous count of completed cleanups, and a browser pings once on first connect, adding one to an anonymous user counter. That is everything: no comments, no email addresses, nothing that identifies you, and nothing linked to your inbox. Suggestions are welcome on Instagram @trysweep.email — those messages live in Instagram and are never stored by Sweep.

Revoking access

You can revoke Sweep's access to your Gmail at any time at Google Account Permissions. Revocation takes effect immediately.

Your GDPR rights

You have the right to access, correct, or delete any data held about you. Sweep stores nothing from your inbox, and the only data it keeps is anonymous and not linked to you, so there is no personal data to delete. For any questions: hello@trysweep.dev