Privacy policy

Last updated
30 January 2026

Your data never leaves your browser. Not to Drew, not to anyone. HideMyEmail for iCloud contains no analytics, no tracking, and no telemetry of any kind.

Data collection

This extension collects no user data.

  • No personal information is collected.
  • No browsing history is accessed or recorded.
  • No page content is read or analysed, beyond detecting email input fields for autofill.
  • No analytics, crash reports or telemetry are collected.
  • No data is sold, shared or transferred to any third party.

Authentication

The extension does not store any credentials. It uses the browser cookies from your existing iCloud.com session. No passwords, tokens or authentication credentials are ever saved.

Network communication

The extension communicates only with Apple’s iCloud servers:

  • https://setup.icloud.com — session validation
  • https://p*.premiummailsettings.icloud.com — Hide My Email operations

No data is sent to any other server. The extension uses Chrome’s Declarative Net Request API solely to add required headers — no other network requests are modified.

Local storage

The extension stores the following on your device using Chrome’s storage API:

  • Your autofill preference, enabled or disabled.
  • Your preferred forward-to email address.
  • A cached session state for the iCloud API connection — URLs only, no credentials.

This data never leaves your device and is cleared automatically when you uninstall the extension.

Content script

The content script runs solely to detect email input fields. It does not:

  • Read or access page content beyond identifying email input elements.
  • Track your browsing activity.
  • Inject any tracking scripts.
  • Modify page content beyond adding an autofill icon to email fields.

Permissions, explained

declarativeNetRequest
Adds the headers Apple’s iCloud API requires
storage
Saves your preferences on this device
tabs
Enables autofill on the page you are looking at
contextMenus
Provides right-click email generation
webRequest
Detects iCloud login and logout events
notifications
Shows confirmation notifications
host_permissions
Communicates with Apple’s iCloud API (*.icloud.com)

Open source

The extension is fully open source. Review the complete source code on Codeberg.

Contact

Questions about this policy? Email Drew Levinson at hey@drewlevinson.me.