Product story
Privacy-first email tracking for Gmail
Most “privacy” claims in this category mean “we also have a policy.” SentCue’s design is narrower: optional pixels for messages you choose, history on this Chrome install, and a processor that stores a random token plus timestamps — not your subject line and not a map of the recipient.
This page is a human rewrite of the differentiators. The Privacy Policy is the legal text. If they ever disagree, the policy wins.
What this version still does not do
No link-click tracking, no city/map of the recipient, no IP profiles, no reading the rest of the mailbox, no Gmail API. Cloudflare may still process the HTTP request that fetches the pixel. Origin access logs redact tokens. If a future paid feature needed Google OAuth or a cloud copy of history, that would require a new disclosure — it is not how 1.2 works.
What stays on your device vs SentCue servers
| Data | This browser | SentCue backend |
|---|---|---|
| To, subject, Gmail thread/message ids | Yes (local history / Sent bind) | No, in this version |
| Message body, attachments, passwords | Never collected | Never collected |
| Per-message random pixel token, send time | Token used to ask for status | Yes, to count activity signals |
| Recipient IP / raw User-Agent | — | Not persisted in the app database. Cloudflare still sees HTTP to serve the image. |
| Reminders and follow-up / done labels | Yes | No |
You are the controller for recipient tracking
If you turn tracking On, you decide whom you email and why. Under frameworks that split controller and processor, you are the controller for personal data relating to those recipients. SentCue provides the technical feature and, for token and timestamps created when the image is requested, acts as a processor on your instructions. This page is not a claim of “100% GDPR compliance,” and it is not legal advice. Jurisdictions differ; ePrivacy-style rules may apply to pixels in email.
No account, no Google OAuth
You do not create a SentCue user. This version does not call Google Workspace APIs and does not use Gmail OAuth. The extension uses a content script on mail.google.com, chrome.storage for settings and history, alarms for reminders, optional notifications you grant separately, and host access to the pixel origin.
What recipients may still see
SentCue does not append a product line to your messages. That is not the same as hiding tracking. A mail client may still load a remote image, warn about images, or show the image URL in the HTML. Activity signals detected. Automated loads are filtered. Signals are not proof that a person read the message.
Not for bulk
There are no lists, sequences, or campaign analytics. If you need those, pick a sales suite. SentCue is for individual mail you already write in Gmail.
How to turn tracking off
Global Off in the popup stops new pixels. Per-message Off in compose skips that send. Delete tracking data for this install clears local history and asks the origin to drop install-scoped rows. Removing the extension also clears local storage.