Is Gmelius: Shared Inboxes & AI Email Assistants for Gmail safe?
Gmelius adds opt-in email tracking, link tracking, and contact enrichment to Gmail by sending data to its own servers and third-party services.
When users enable the Email Tracking feature, Gmelius injects a 1x1 pixel into outgoing messages and sends recipient email addresses to gml.email to record opens. Outgoing links can be rewritten to gml.email redirect URLs so Gmelius can log clicks. Thread data is sent to api.gmelius.com to display enriched sender profiles in a sidebar. The InboxSDK framework bundled with the extension separately transmits hashed user email and session telemetry to a Google PubSub project controlled by InboxSDK.
Who publishes itGmelius SA - no other listings under this identity
Gmelius SA - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Gmelius contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- pubsub.googleapis.com
Gmelius sends data to pubsub.googleapis.com. 4 other extensions we have analysed send data here.
- api.inboxsdk.com
Gmelius sends data to api.inboxsdk.com. 3 other extensions we have analysed send data here.
- api.gmelius.com
Gmelius sends data to api.gmelius.com. No other extension we have analysed sends data here.
- gml.email
Gmelius sends data to gml.email. No other extension we have analysed sends data here.