Privacy policy

lameatlas · last updated 12 September 2026

lameatlas is a personal, self-hosted application with a single user: its developer. This policy describes what it does with data obtained through Google APIs.

What is accessed

With the https://www.googleapis.com/auth/gmail.readonly scope, lameatlas reads messages in the account owner's own Gmail mailbox. It lists messages by date, examines the From and Subject headers, and retrieves the full message only for mail from a fixed list of transactional senders — food delivery, restaurant ordering, lodging, event ticketing and transit operators.

What is stored, and where

From those messages it extracts the merchant, date, time, amount and address, and stores them in a private database on hardware the account owner controls. Nothing is stored on any third-party server. There is no hosted backend, no cloud database and no analytics.

What is not done

• Data is never transmitted to any third party.
• Data is never sold, licensed, or used for advertising.
• Data is never used to train machine-learning models.
• No human other than the account owner has access.
• Mail is never sent, modified, labelled or deleted — access is read-only.

Retention and deletion

Extracted records are kept for as long as the account owner keeps the database, and are deleted by deleting it. Access can be withdrawn at any time at myaccount.google.com/permissions, which immediately and permanently stops any further reading.

Limited Use

lameatlas's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

odonnell.liam99@gmail.com

← lameatlas