Privacy Policy

Last updated August 22, 2026

Mail Pixel is operated by Tiny Mammoth. This page describes exactly what we collect when you use Mail Pixel and why.

What we collect

When you send an email with Mail Pixel installed, the extension registers that outgoing message with our server: its subject line, its recipient addresses, and the technical identifiers needed to match it later (the thread and message IDs, and the time it was sent). That is how we can tell you which email was opened and show it in your dashboard and notifications. A small invisible image (a "tracking pixel") is also embedded in the message. When that pixel loads — meaning the recipient opened the email — our server records: the time of the open, the message it belongs to, and a salted, one-way hash of the requester's IP address. We never store the raw IP address itself, and the hash cannot be reversed back into an address.

What we never access

Mail Pixel never reads, stores, or transmits the body or attachments of your emails, and it never reads your inbox. From the mail you send, it keeps only the details described above.

Account data

When you sign in with Google, we store your Google account email, your name as Google provides it, and a stable identifier for your account, so we can associate your sent messages, opens, and settings with you specifically. We do not receive or store your Google password — sign-in uses Google's own OAuth flow.

API tokens

The browser extension authenticates to our API using a token you generate from your dashboard. We store only a hash of that token, never the token itself, so even we cannot recover it after it's issued. You can revoke any token at any time.

Slack notifications

If you connect Slack, we store the webhook URL Slack gives us for your chosen channel, so we can deliver open notifications there. We do not read your Slack messages or channel history — the connection is one-way, outbound notifications only.

Data isolation

Every message, open event, token, and Slack connection is scoped to your account. Our systems are built so that one user's data is never returned in a query made on behalf of another user.

Data deletion

You can disconnect Slack and revoke API tokens yourself from the dashboard at any time. To request deletion of your account and all associated data, email support@tiny-mammoth.com and we will delete it within a reasonable time.

Contact

Questions about this policy can be sent to support@tiny-mammoth.com.

Mail Pixel is a product of Tiny Mammoth, a Lee Group Ventures company.