Typed

Privacy policy

Last updated: September 30, 2026

What Typed does not do

Typed does not send any data to the developer, to a Typed server or to anyone else. It does not record, log or store your keystrokes, message text, recipients or subjects. It does not use analytics, telemetry, crash reporting or advertising identifiers. It runs only on https://mail.google.com, and it reads email you are viewing only to find the “✅ typed” line at the end of a message so it can show a badge.

What Typed keeps on your device

To keep a draft’s score when you close and reopen it, Typed stores one small record per draft in your browser’s local extension storage: the number of typed and inserted characters, the draft’s length, fixed reason labels such as “pasted content”, and a 32-bit fingerprint of the text used only to check that the draft was not changed elsewhere. The fingerprint cannot be turned back into text. Records are deleted after 30 days, can be cleared from the extension popup, and are removed when you uninstall Typed. Your settings are stored the same way.

While you type, Typed keeps the last 24 gaps between keystrokes in memory to spot machine-generated typing. These are durations only, never which keys were pressed, and they are discarded when the compose window closes.

Signing key

Typed signs each badge with a key pair created on your device the first time it is needed. The private key is a non-extractable WebCrypto key in the extension’s own storage. It cannot be exported and Gmail cannot reach it. You can replace it from the popup.

The public key travels inside the badge of every signed message, as a stable identifier for your Typed installation. When you read a signed message, Typed remembers that sender’s public key so it can warn you if it changes. That is the only record kept about other people.

The badge in your email

When you send a message, Typed adds a visible line such as “✅ typed” or “73% typed”, followed by a short typed-sig: line with your public key and a signature. It is part of your email and Gmail delivers it like the rest of your message. You can turn it off or set a minimum score in the popup.

Permissions

Typed requests only storage, for the records above, and access to https://mail.google.com/*, so it can run inside Gmail.

The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

Questions

For questions about this policy, use the email link on Dima Dobrynin’s homepage.