Chrome Web Store
2Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

45 indicators in this extension

45 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Tolomail: Gmail Attachments & Reply Tracker is not yet reviewed by Extension Auditor. It was last updated in June 2026.

Tolomail: Gmail Attachments & Reply Tracker

Tolomail: Gmail Attachments & Reply Tracker Chrome extension security report

ID: glhmdenddccbbpblgoaanpadgogiecfa

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
0.9.96-store-title-keywords
Size
0.58 MB
Rating
5.0/5
Reviews
1
Users
13
Type
Extension
Updated
Jun 13, 2026
Category
Communication
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
toccainvest@gmail.com
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
44064 MOUNTAIN VIEW TEMECULA, CA 92592 US
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
13

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
identity.email
Permission
High
This permission directly accesses the user's email address. Rated High because it reveals personally identifiable information and can be used for tracking or targeting.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://mail.google.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://gmail.googleapis.com/gmail/v1/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.googleapis.com/drive/v3/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.googleapis.com/upload/drive/v3/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.googleapis.com/oauth2/v3/*
Host
Medium
Host permission — access limited to this URL pattern.
https://oauth2.googleapis.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://mail.google.com/*, https://gmail.googleapis.com/gmail/v1/*, https://www.googleapis.com/drive/v3/*, https://www.googleapis.com/upload/drive/v3/*, https://www.googleapis.com/oauth2/v3/*, https://oauth2.googleapis.com/*
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

45 indicators in this extension

45 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Thread maps, awaiting replies, searchable attachments — privately, on your device. Requires Gmail Conversation View.

Read the publisher’s full description

Copy everything below this line and paste it into the Description field: --- Find Gmail attachments fast, see who still owes you a reply, and map long conversations as a tree. Tolomail adds a private, on-device workspace to Gmail: searchable attachments, awaiting-reply tracking, Thread Map, and per-thread notes. No server, no AI, no tracking, and read-only Gmail access. Requires Gmail Conversation View. The name comes from "Tolomeo" — Italian for Ptolemy, the Alexandrian astronomer who first mapped the heavens — plus "mail." Tolomail maps your inbox the way Ptolemy mapped the stars. ▸ ATTACHMENTS PANEL — FOLLOWS YOUR FOLDER A searchable, locally-indexed view of your Gmail attachments. Filter by type (PDF, image, doc), sender, or date. The panel auto-scopes to whichever Gmail folder you're viewing — Inbox shows received attachments, Sent shows sent attachments, search/label views show everything. Click any attachment for an instant in-panel preview, or open the parent email in Gmail. Off by default — toggle ON in the popup when you want it. ▸ THREAD MAP See the structure of any Gmail conversation at a glance. Tolomail renders threads as a tree (reply relationships), a table (sortable by date/sender), or a list of who you're still waiting on. Open any thread in Gmail and the map appears in Chrome's side panel. Requires Gmail's Conversation view to be ON (Gmail Settings → General → Conversation view: On). ▸ AWAITING-REPLY TRACKER Tolomail scans your sent mail and flags threads where you've replied but the other person hasn't responded for N days (configurable). Auto-responders, bulk mail and FYI-forwards are filtered out. Color-coded urgency pills (red / amber / green). Stop losing important conversations to inbox overload. ▸ PER-THREAD STICKY NOTES Pin a private note to any thread — visible only in Tolomail, never sent to anyone. Useful for "called Anna about this, awaiting paperwork" annotations that disappear from your view until you reopen the thread. ▸ SENDER INSIGHTS For each sender, Tolomail shows your history: first contact, threads exchanged, average reply time. Helps you see the relationship behind the latest email. Shown in the in-Gmail card view. ▸ MULTI-ACCOUNT SUPPORT Add as many Gmail accounts as you want. Each gets a different neon border color so you always know which account you're looking at. Tolomail follows whichever Gmail tab is focused and switches automatically. Per-account data is fully isolated. ▸ OPTIONAL CLOUD BACKUP — TO YOUR OWN DRIVE Sync your notes, awaiting list, and favorites to your own Google Drive (in a private appdata folder only Tolomail can see) so they survive a Chrome reinstall. Off by default; toggle on in Settings. ▸ PRIVACY-FIRST • Your Gmail data is read in your browser and stored locally on your device — never uploaded to any Tolomail server. • Tolomail does not run any backend service that receives your data. • No analytics, no tracking, no ads. • Even bug reports respect your privacy: the built-in diagnostics panel (Alt+Shift+L) masks email addresses, redacts search queries and label names, and never logs message subjects or bodies. You review every line before sharing. • Open about what permissions are used and why (see Privacy Policy). REQUIREMENTS • Chrome (or Chromium-based browser) on desktop • A Gmail account (personal or Google Workspace — subject to your admin's settings) • Gmail's Conversation View enabled (Settings → General → Conversation view: On) PERMISSIONS • Gmail (read-only, gmail.readonly): to render thread maps and extract attachment metadata • Google Drive (drive.appdata): for the optional notes backup, off by default • Standard Chrome permissions (storage, side panel, downloads) for local data and UI For full details on data handling, see the Privacy Policy linked from this page. KNOWN LIMITATIONS • Tolomail reads your Gmail; it never modifies, sends, or deletes mail. • Large mailboxes (>10k attachments) take a few minutes for the first sync. • Attachments feature is OFF by default — toggle ON in the popup to start indexing. • Drafts are not indexed in v1. • Mobile is not supported (Chrome extensions don't run on mobile). PRICING • Free tier: Thread Map, Sender Insights, per-thread Notes, single Gmail account, local-only storage. • Pro ($5.99 / month or $49 / year): Everything in Free, plus Awaiting-Reply tracker, Attachments panel, unlimited multi-account, Drive backup. • Beta testers keep Pro free forever. SUPPORT support@tolomail.com — for bug reports, press Alt+Shift+L in Gmail and click "Copy all" to attach privacy-masked diagnostics.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
45

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

45 indicators in this extension

45 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.9.110-teardown-race-render-guards
Latest
0.59 MBNot scanned—
d379a43bd03ab5be238b965a8449533646e854e0a5a446988954da7ca6b8bacf
0.9.96-store-title-keywords
0.58 MBNot scanned—
d379a43bd03ab5be238b965a8449533646e854e0a5a446988954da7ca6b8bacf
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.