Reveal URLs — Privacy Policy
Last updated: 2026-06-09

Reveal URLs reveals the true destination of links in your webmail so you can spot phishing before you click. It does its work entirely on your own device.

The short version

Reveal URLs sends nothing to us or to any third party. There is no server, no analytics, no tracking, and no remote code. We, the developers, receive none of your data.

What it accesses (locally only)

To reveal and check links, the extension reads — only within the page you're viewing — the visible text and the destination (href) of links in the message you're reading, plus the page's colours (to keep the revealed URL legible). This is read in your browser as the page renders; it is never stored and never transmitted.

What it stores

Only your own settings — e.g. enabled/disabled, display mode, colours and font sizes, your ignore-list, and any sites you choose to add (their URL match pattern and message-body selector). These are saved via your browser's extension storage:

• If your browser's sync is on, your settings sync across your signed-in devices, handled by your browser vendor under their privacy policy — never sent to us. Settings only; never email content or browsing history.
• If sync is unavailable, settings stay local to the device.

Removing the extension clears them.

What it does NOT do

• It does not collect, transmit, sell, or share any personal data.
• It does not send your email, link data, or browsing history anywhere.
• It contains no analytics, telemetry, advertising, or trackers.
• It loads no remote code; all logic ships inside the extension.

Permissions

• storage — to save your settings.
• Access to your webmail site(s) — Gmail, Outlook and Proton by default, plus any site you explicitly add and grant — so it can annotate links in the messages you read. Additional sites are only ever accessed after you grant permission to that specific site.
• scripting — to run the link-revealing code on those sites.
• (Thunderbird only) messagesRead — to annotate links in the message you're reading.