True Zero-Trust Privacy for Your
Gmail™ Attachments
Unlike competing extensions that force you to sign into Google and hand over broad account tokens before letting you do anything, Badgy requires ZERO Google sign-in to bundle ZIPs or print files. Everything processes purely inside your local browser memory.
Why Badgy Is Fundamentally Safer Than Alternatives
See how Badgy compares to traditional extensions and web tools that mandate full Google account logins.
| Security & Privacy Guarantee | Badgy (Zero-Trust) | Traditional Competitors & Cloud Tools |
|---|---|---|
| Google Account Sign-In Required? | NO (Zero login needed) Works instantly directly inside Gmail using your native browser session. | YES (Mandatory Google OAuth) Forces you to authenticate before you can even launch or click a button. |
| OAuth Scopes for ZIP & Print | Zero OAuth Permissions Never requests mailbox read, send, or modify privileges. | Full Mailbox & Identity Scopes Requests tokens granting server-side access to messages and profile. |
| Attachment Processing Location | 100% On Your Computer Files are processed directly inside your browser and saved straight to your Downloads folder. | External Cloud Servers / Proxies Attachments are often routed through remote cloud servers to generate ZIPs. |
| Independent Network Auditability | Instantly Verifiable in DevTools Press F12 and watch the network tab — 0 bytes leave Google's origin. | Opaque Black Box Once tokens are sent to their server, you cannot audit where files travel. |
| Google Drive Cloud Scope | Strictly Optional & Narrow (`drive.file`) Can only see files created by Badgy. It cannot read your existing Drive files. | Broad or Permanent Drive Access Often requests blanket read/write across all your personal Drive documents. |
How Badgy's In-Browser Memory Pipeline Works
When you click Download, your files never leave your computer. Here is the exact lifecycle of your data from Gmail to your local disk:
Select in Gmail
Choose the emails with attachments you need. Badgy integrates seamlessly into your standard Gmail web interface.
Local In-Browser Packaging
Attachments are downloaded directly through your browser and bundled into an organized archive on your machine.
Saved to Your Computer
The completed archive is saved straight to your computer's Downloads folder. Your files remain completely private to you.
How to Verify in 60 Seconds with Chrome DevTools
You do not have to take our word for it. Every IT administrator, security auditor, or curious user can independently verify our zero-server claims in their own browser.
Open Gmail & Launch DevTools
Open your Gmail tab. Press F12 (or Cmd + Option + I on Mac) to open Chrome Developer Tools.
Filter Network Tab by Fetch/XHR
Switch to the Network tab in DevTools and toggle the Fetch/XHR filter.
Trigger a Download in Badgy
Select any emails with attachments in Gmail and click Download ZIP.
Verify Origins
Observe the requests: All attachment streams flow exclusively from mail.google.com to your browser. Zero file payloads are sent to any external domain.
Optional Google Drive Sync: The Principle of Least Privilege
Only activated if you explicitly choose to backup attachments to Google Drive
If you use our Pro Save to Google Drive feature, Badgy connects directly to the official Google Drive API via Google OAuth. To protect your security, we request only the narrowest scope permitted by Google:
Frequently Asked Security & Compliance Questions
Does Badgy store or scan my email messages?
No. Badgy never asks for the Gmail API full mailbox read permission. It only interacts with the specific emails you have visibly checked or selected in your current browser view.
Is Badgy compliant for healthcare, legal, and CPA firms?
Yes. Because Badgy operates under a Zero Data Retention (ZDR) client-side architecture where confidential contracts, tax forms, and patient records remain strictly inside your local computer session, your client data remains entirely within your existing organization boundary.
Do you record my screen or record session replays?
No. We explicitly disable session recording in PostHog. Telemetry is limited strictly to operational counters (e.g. number of attachments in a batch run, errors encountered) without any file payloads, filenames, or message texts.
Start Downloading Safely in 30 Seconds
No account creation, no credit card required, and no Google account sign-in.
Add to Chrome — Free
Add to Edge — Free