Privacy policy

Last updated: 20 August 2026

This policy is written for the Chrome Web Store listing and the in-extension disclosure. It is not legal advice.

Fromensics is a Chrome extension that helps you investigate the sender of a Gmail message you choose. Its single purpose is local sender investigation.

What we access

When you click Investigate Sender, the extension reads from the open Gmail page, on your device:

• Sender address and display name
• Subject and visible date
• Message body and links shown in that message
• Attachment names if Gmail exposes them
• Gmail’s mailed-by / signed-by lines only if you already expanded message details

We do not use the Gmail API and do not request Google account OAuth for this version.

How it is used

That content is used only to generate an investigation report on your device (rules, optional Chrome on-device AI, optional local threat feed).

Chrome’s on-device Prompt API (Gemini Nano) may run on the extracted text inside the side panel. Chrome may download that model. The email is not sent to Fromensics servers for that analysis.

What leaves the device

Strict local mode (default): investigation does not upload the email body, subject, or recipients to Fromensics.

Private live-check (opt-in): may send only a domain, hostname, or similar indicator to DNS-over-HTTPS (Google or Cloudflare), RDAP (rdap.org), or — with Fromensics Pro — the Fromensics privacy proxy at proxy.fromensics.com. Never the full message. Each lookup is listed in the report. A Pro proxy lookup includes the license key plus that indicator, not the email.

Fromensics Pro license check: when you click Check license in Settings, the extension sends only two fields to https://proxy.fromensics.com/api/license/validate: the license key and the extension version (JSON fields licenseKey and extensionVersion). It does not send the email, subject, body, or recipients. The Whop company API key is not in the extension; it stays on our server. Checking a license is optional and is not required to investigate a sender.

Storage

The last investigation may be stored in Chrome extension storage on this computer so the side panel can show it. You can remove the extension to delete that storage. We do not operate a central database of analyzed emails.

Sharing

We do not sell email content. We do not use it for ads. We do not let humans read your messages except if required by law or with your explicit request (for example support you initiate).

Limited Use

Fromensics’ single purpose is sender investigation for the Gmail message you select. We collect, use, and transmit only what is needed for that disclosed purpose. We do not sell user data, use it for advertising, or provide it to data brokers. The standalone statement is at fromensics.com/limited-use.

This version reads the open Gmail page after a user click and does not call Google APIs. If a later version uses information received from Google APIs, that use will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes

If data practices change after install, Fromensics will disclose that in the product before the new practice applies.