Is Gmail Inbox safe?

Clean risk

Gmail Inbox reads Gmail Atom inbox feeds and displays message metadata in its side panel.

Gmail Inbox requests Gmail's Atom inbox feed through the user's signed-in Google session. It parses message titles, links, snippets, dates, sender names, and sender email addresses, then renders that metadata locally in the side panel.

team_boltv1.0.2Chrome Web Store
0Risk
Who publishes it

team_bolt - 1 other listing from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Same store account

1 other listing published from this account, 100k+ users between them. 1 of them carries a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on google.com

    https://*.google.com/*

  • Show a panel beside the page

    sidePanel

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Store data in your browser

    storage

  • Keep running in the background while your browser is open

    background

  • Add items to the right-click menu

    contextMenus

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Where it sends data

Destinations our analysis observed Gmail Inbox contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • mail.google.com

    Gmail Inbox sends data to mail.google.com. 10 other extensions we have analysed send data here.

Updated 30 September 2026ffajkdgeelnaminkehobmmpiclbpcnfm