Gmail Guard

Tracking since May 24, 2026.

Changelog

• May 30, 2026
  description

  Gmail Guard scans only the unread messages currently loaded on your current Gmail page and highlights messages that may deserve extra caution.
  
  It checks sender/domain clues, brand impersonation patterns, urgent account-verification wording, payment and refund wording, prize or gift-card language, risky file wording, and other common phishing signals.
  
  Privacy-first behavior:
  - Runs only on mail.google.com
  - Scans only the current Gmail page
  - Uses local browser-side rules
  - Does not use Gmail API or OAuth
  - Does not send email content to a server
  - Does not use analytics, ads, tracking, or external AI services
  - Does not delete, move, label, archive, mark read/unread, send, or forward emails
  
  Important limitation: this version intentionally avoids Gmail API access, so it only analyzes unread Gmail rows currently loaded on the current Gmail page. It does not scan across Gmail pages or the full mailbox.
  
  Gmail Guard is not affiliated with Google or Gmail.

  Gmail Guard scans only the unread messages currently loaded on your current Gmail or Outlook page and highlights messages that may deserve extra caution.
  
  It checks sender/domain clues, brand impersonation patterns, multilingual urgent account-verification wording, payment and refund wording, prize or gift-card language, risky file wording, optional Google Safe Browsing API URL reputation signals, and other common phishing signals.
  
  The extension is designed for quiet, on-demand protection. It runs when you open Gmail or Outlook Web and does not send daily reminders.
  
  Privacy-first behavior:
  - Runs only on configured Gmail and Outlook Web mail pages
  - Scans only the current mail page
  - Uses local browser-side rules by default
  - Optional Google Safe Browsing API URL reputation checks can be enabled by the user
  - Does not use Gmail API, Microsoft Graph API, or OAuth
  - Does not send email content to a server
  - Sends extracted external URLs to Google Safe Browsing API only if the user enables URL reputation checks
  - Does not use analytics, ads, tracking, or external AI services
  - Does not delete, move, label, or modify emails
  
  Important limitation: because this version intentionally avoids mail provider API access, it only analyzes unread Gmail or Outlook rows that are currently loaded on the current mail page. It does not scan across mail pages or the full mailbox. The scan limit is an upper bound for the current page, not a mailbox-wide fetch count. Multilingual wording signals are local phishing-risk hints, not perfect detection. Safe Browsing API no-match results do not mean a message is safe.
  
  Gmail Guard is not affiliated with Google, Gmail, Microsoft, or Outlook.

• May 30, 2026
  short_description

  Highlights suspicious unread messages on the current Gmail page with local phishing-risk hints.

  Highlights suspicious unread messages on the current Gmail or Outlook page with local phishing-risk hints.

• May 30, 2026
  host_permissions

  (empty)

  https://safebrowsing.googleapis.com/*

Permissions & access

Permissions

storage

Host access

https://safebrowsing.googleapis.com/*

Screenshots