Mail Mop requires specific Gmail API permissions to provide its email management functionality. These permissions are requested during the Google sign-in process and are essential for the application to function properly.
https://www.googleapis.com/auth/gmail.modifyThis permission is required to perform batch modifications on your Gmail messages. Specifically, it allows Mail Mop to:
The gmail.modify scope is necessary because it provides the ability to make changes to your messages in bulk, which is essential for efficient email management. Without this permission, we would not be able to perform batch operations on your emails, making the application's core functionality impossible.
Note about API Limitations: The gmail.modify permission also includes the ability to create and send emails, which is a limitation of Google's API design. Mail Mop does not use these capabilities - we only use the permission for managing existing emails. Unfortunately, Google does not provide more granular permission settings that would allow us to request only the specific capabilities we need.
https://www.googleapis.com/auth/gmail.labelsThis permission is required to manage Gmail labels. It allows Mail Mop to:
The gmail.labels scope is crucial for our labeling system, which helps organize your emails based on their sender domains. This permission enables us to create and manage the label structure that keeps your inbox organized.
When you sign in with Google, Mail Mop uses these permissions to:
The gmail.modify permission allows us to use the users.messages.batchModify endpoint, which is essential for efficiently processing multiple emails at once. This is much more efficient than modifying messages one at a time.
The gmail.labels permission enables us to create and manage labels through the users.labels endpoints, which is necessary for organizing your emails into meaningful categories.
Mail Mop only accesses and modifies your Gmail data to provide the requested email management services. We do not:
All API requests are made using secure HTTPS connections, and we only request the minimum permissions necessary to provide this service. Your Google account credentials are never stored on any device or location - we only maintain the access token provided by Google for authenticated API requests.