What Peekat Email’s permissions are for
Peekat reads your mail through the Gmail account already signed in to your browser, so it asks the browser for access to mail.google.com and accounts.google.com, plus notifications, the clipboard for codes and a few smaller features. Your mail is read only from Google and stays in your browser; it is never sent to us. Peekat never sends mail and never deletes anything permanently.
Each permission, and why
| Permission | What Peekat uses it for |
|---|---|
| mail.google.com and accounts.google.com | To read your unread mail and counts from Gmail with the account signed in to your browser, and to mark a message read, archive, star, report spam or move it to Trash when you ask. |
| Cookies | To use the Gmail sign-in your browser already has, for those two Google sites only. Peekat never creates or changes a sign-in. |
| Notifications | To show a notification for new mail that needs you. |
| Clipboard (write) | To copy a code when you click its notification. Never by itself. |
| Active tab and scripting | To fill a code into the page in front when you copy it in the toolbar popup, only on the sender’s own site. Nothing runs on any page without that click. |
| Storage | To keep your settings and the mail Peekat lists on your device. |
| Alarms and idle | To check for new mail on a schedule, and right away when you come back to your computer. |
| Offscreen | To play sounds and copy codes in Chrome and Edge. |
| Context menus | For Check now, Open in a tab and Settings on Peekat’s toolbar button. |
Your browser sums these up in its install prompt in its own words, such as reading and changing your data on the Google sites above.
What Peekat changes in Gmail
Only what you ask for: opening a message in Peekat marks it read in Gmail, and the Mark as read, Archive, Star, Report spam and Delete buttons do what they say. Delete moves a message to Gmail’s Trash. Peekat never sends mail, never changes your Gmail settings and never deletes mail permanently.
What Peekat talks to
Google’s Gmail, for your mail, and once a day our site, peekat.email, to ask whether a newer version exists, sending only its version number and browser family. There is no account with us, no analytics and no ads in the extension. The full detail is in the privacy policy.
Connect with Google, and Google’s verification
Connect with Google is an optional way to add an account that does not depend on the browser’s Gmail sign-in. It is not in the store version yet (October 30, 2026). With it, Google shows its own consent screen and asks for these permissions, in Google’s words:
openid: “Associate you with your personal info on Google”email: “See your primary Google Account email address”https://www.googleapis.com/auth/gmail.modify: “Read, compose, and send emails from your Gmail account”
The last one, gmail.modify, is the narrowest Gmail permission that lets an app mark a message read, archive it or move it to Trash, so Google’s description is broader than what Peekat does with it. Peekat uses it only for the features above, and never sends mail.
Status: Google has not verified Peekat’s use of this permission yet. Until it does, Google’s consent screen warns that it hasn’t verified the app, and no more than 100 people can connect. Peekat works without it, through the browser’s Gmail sign-in described above.
Ending its access
Remove the extension from your browser. Its access ends at once, and the mail it kept on your device goes with it. If you used Connect with Google, you can also remove Peekat in your Google Account under third-party connections.
Add to Chrome — free
Chrome Web Store and Edge Add-ons. Other browsers