Privacy notice

Google access and its limits

The Gmail readonly permission is technically mailbox-wide. The program restricts its requests to the configured thread and a narrow matching search, then requests matching message metadata and text. OpenID and email permissions verify the authorised account.

A separate existing send-only grant sends alerts only to the same owner. The monitor does not label, archive, delete or reply to messages, and does not send replies to Support.

There is no dedicated attachment fetch or extraction. Bounded full-message responses may incidentally contain inline attachment data; it is ignored rather than saved.

Message processing and owner alerts

Matching message text is processed in memory. Short sanitised quoted excerpts may be sent via Gmail to the same owner so they can inspect the original correspondence. These alert emails remain in Gmail according to the owner's mailbox settings.

There is no sale of Google user data, advertising use, AI or model training, or paid AI processing. Data is used only for the owner's authorised notification purpose.

Forge Support Watch's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Private state, credentials and retention

Local private operational state stores IDs, timestamps, and outcome and error categories only. Protected OAuth credentials are stored separately. No message bodies or token values are stored in logs or state.

Operational state is retained while the monitor runs for deduplication and safe handling of alert attempts. The owner must manually remove this state when they decommission the monitor. There is no automatic deletion period.

Stopping access

The owner can revoke the Google connection through Google Account connections and stop the separate monitor. The read and send connections are separate; revoking one does not revoke the other.

Revocation does not automatically erase existing delivered email or private operational state. The owner manages delivered alerts through Gmail and removes local state separately when decommissioning the monitor.

Website requests and contact

These static pages include no scripts, external fonts, images, forms, signup or login. The page code sets no cookies and includes no tracking or analytics. The pages do not collect case content or account credentials.

Cloudflare Pages is the selected hosting provider for this information website. Cloudflare may process ordinary request and network data, such as an IP address and the page requested, to deliver and secure the website. This may include access and security logs. No specific provider log retention period is stated here. See the Cloudflare Privacy Policy for the provider's privacy information.

For privacy questions, use the support contact shown on the Google consent screen. Forge Support Watch is not affiliated with or operated by Google or OpenAI.