Privacy

What this site does

Spaminator 3000 shows you email that is probably junk, one card at a time. You swipe left to get rid of it or right to keep it. If you connected a Gmail account, the site finds that email in your inbox and moves what you swipe left to your Spam folder.

What the site can do in your Gmail

• Read the messages in your inbox, to decide which ones to show you.
• Check whether you have ever written to a sender. Mail from people you write to is never shown as junk.
• Move a message to Spam when you swipe left on it and press Done.

It never sends email, never deletes email for good, and never changes anything you didn't swipe on. It looks at your inbox only when you open the site or press a button to check, not in the background.

Google's permission screen describes this access as “read, compose, and send”. That is Google's wording for the one permission that allows moving mail to Spam; the site does not compose or send anything.

What is stored

• Your name and email address, from Google, to sign you in.
• A key that lets the site reach your Gmail, stored encrypted. Disconnecting in Settings deletes it and tells Google to cancel it.
• For each message shown on a card: the sender, the subject, when it arrived, and up to the first 2,000 characters of its text. The text is deleted as soon as your decision has been carried out. The rest is deleted 30 days later.
• Messages that are looked at and not shown to you are not stored at all.

Who else sees your email

To decide whether a message looks like junk, the site sends its sender, subject and the start of its text to TypeSafe, whose model answers a few yes-or-no questions about it. TypeSafe states that it does not train its models on this data. Nobody else receives your email. The site runs on Vercel and its database is hosted by Neon; both store data on the site's behalf.

Your Gmail data is never sold, never used for advertising, and never used to train AI models. The site's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. No person reads your email, unless you ask for help with a problem and agree to it, or the law requires it.

Leaving

Disconnect a Gmail account in Settings at any time; its key and cards are deleted straight away. You can also remove the site's access from your Google Account, under Security, then third-party access. To have your whole account deleted, ask the person who invited you.