Privacy Policy

Mail Attachments MCP · Last updated 10 October 2026

Mail Attachments MCP ("the app") is open-source software that runs entirely on your own computer. This policy explains what Google user data it accesses and what it does with it.

Data the app accesses

With your permission, the app uses the Gmail API with the read-only scope (https://www.googleapis.com/auth/gmail.readonly). It reads only what it needs to save an attachment you ask for: the structure of that message (its parts, filenames, types and sizes) and the attachment's contents.

How the data is used

The app saves the requested attachment to a folder on your computer (~/.cache/gmail-attachments-mcp/attachments/ by default), readable only by your user account, so that you or an AI assistant you run can open it. It doesn't read, index or copy any other mail.

Storage and sharing

• Your Google sign-in token and the attachments you save stay on your computer. They are never sent to the developer or to any other server; the app talks only to Google's APIs.
• The app has no analytics, tracking or advertising, and the developer collects no data.
• Anything you then share with an AI assistant is governed by that assistant's own privacy policy.

Google API Services User Data Policy

The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access and data

You can revoke the app's access at any time from your Google Account, under Your connections to third-party apps. To delete the data it stored, delete the folder ~/.config/gmail-attachments-mcp/ (your sign-in token) and ~/.cache/gmail-attachments-mcp/ (saved attachments).

Contact

Questions about this policy can be raised as an issue on GitHub.