Privacy Policy

Effective October 17, 2026

Peeped is a Chrome extension that adds read receipts to Gmail: it tells you when the emails you send are opened. This policy explains what Peeped collects, why, where it is kept, who can see it, and the choices you have. It covers the Peeped extension and the Peeped tracking service it uses.

The short version

• Peeped never reads, copies or uploads the content of your emails.
• Subjects, recipient names and addresses stay in your browser. Our server only sees random codes and the times emails were opened.
• We don't store the IP addresses or locations of the people who open your emails.
• We don't sell data, show ads, or use analytics or advertising trackers.

How Peeped works

When you send an email from Gmail, Peeped adds a tiny invisible image (a tracking pixel) to it, with a random code that is unique to that email. When your recipient's email app displays the email, it loads that image from our tracking service, which records that the email was opened and when. Peeped then shows this next to the email in your Gmail.

Information we collect

Stored only in your browser

To show read receipts next to the right emails, the extension keeps the following on your own computer, in the extension's storage and in a backup copy in Gmail's page storage on your computer (so your history survives reinstalling the extension):

• the subject, recipient names and email addresses, and send time of each email Peeped tracks;
• the times those emails were opened, as reported by our tracking service;
• a random key that identifies your installation to our tracking service, and your on/off setting.

This information is not sent to us or anyone else.

Read by the extension inside Gmail, never sent anywhere

To work, the extension reads parts of the Gmail page while you use it: the recipients and subject in the compose window when you press Send, the subject and participants of rows in your email list (to place the read receipts), and whether Gmail's outgoing message still contains the tracking image (to warn you when Gmail's plain text mode removes it). All of this is processed in your browser and is not transmitted.

Stored by our tracking service

What	Why
For each tracked email: a random code, a one-way hash of your installation's key (not the key itself), and the time it was sent.	To know which installation an open belongs to, and when it happened relative to sending.
For each time the tracking image is loaded: the time; the name of the software or service that loaded it (its "user agent"); the name and number of the network it came from (for example "Google LLC"); and other technical request headers, such as accepted file formats.	To tell real reads apart from automatic loads by spam filters, security scanners, Apple Mail and Gmail, so Peeped doesn't show a read that never happened.
When the image is loaded by Google's own image proxy: the proxy's IP address and the Cloudflare data centre that answered it. These belong to Google's servers, not to your recipient.	The same: to tell automatic Gmail loads from real reads.

We do not store the IP address, country or location of the person or device that opens your email, the content of any email, subjects, or recipient addresses. A network name can sometimes indicate a recipient's internet provider or organisation (for example a school or company network).

About your recipients

Read receipts are about the people you email. When you use Peeped, you decide to track your emails, and you are responsible for doing so lawfully where you live and where your recipients are, including telling them where the law requires it. Recipients can avoid tracking by not loading images in their email app.

How we use information

Only to provide Peeped's features: showing whether, when and how many times your emails were opened, alerting you when they are, and filtering out automatic, non-human opens. We do not use it for advertising, sell it, or use it to build profiles of you or your recipients.

Google user data

Peeped's use of information it accesses in Gmail adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Peeped does not use the Gmail API and does not request access to your Google account.

Sharing

We do not sell, rent or trade information. Our tracking service runs on Cloudflare (Cloudflare Workers and D1), which stores and processes the data described above on our behalf, in the United States and elsewhere. We may disclose information if required by law.

Retention and deletion

The tracking service keeps the records described above for as long as Peeped is offered, so read receipts keep working for older emails. Information stored in your browser stays until you remove it: use "Stop tracking" in Peeped's details page to forget an email, or uninstall Peeped and clear Gmail's site data to remove everything stored locally. To ask us to delete the records linked to your installation, contact us through the support link on Peeped's Chrome Web Store page.

Security

Information travels between the extension and our tracking service over encrypted HTTPS connections. Your installation key is sent to the tracking service over HTTPS to identify your installation, and the service stores only a one-way hash of it.

Children

Peeped is not directed to children under 13, and we do not knowingly collect information from them.

Changes

If we change this policy, we will update it on this page and change the date at the top.

Contact

Questions or requests about privacy can be sent through the support link on Peeped's Chrome Web Store page.