typed.cc
Privacy policy
Last updated: October 4, 2026
In short:
- Nothing you write leaves your browser. typed.cc has no server and no network code.
- No tracking: no analytics, telemetry, crash reports or ads.
- It never stores your message text or keystrokes, only character counts.
- The only thing that goes out is the badge line it adds to emails you send, which you can turn off.
What does typed.cc read?
It runs only on https://mail.google.com, and everything below happens inside your browser.
The message you are writing. typed.cc watches the compose box to count how many characters you typed and how many were pasted or inserted. When you send, it hashes the text (SHA-256) to sign the badge.
Messages you open. typed.cc checks the end of each message for a typed.cc badge. If there is one, it reads that message’s text and the sender’s address to check the signature.
What does it store, and where?
Only on your device, in the extension’s own storage. Nothing is synced or uploaded.
| What | Contents | Kept for |
|---|---|---|
| Draft scores | Typed and inserted character counts, the draft’s length, labels such as “pasted content”, and a short fingerprint of the text that cannot be turned back into text. Never the text itself. | 30 days |
| Settings | Four on/off switches. | Until uninstall |
| Your signing key | A key pair made on your device. The private key cannot be exported, and Gmail cannot reach it. | Until you reset it or uninstall |
| Senders’ public keys | For each person whose signed badge you have seen: their email address, public key, when it was first seen and how many times it matched. Used to warn you if their key changes. | Until uninstall |
While a compose window is open, typed.cc also keeps in memory the timing of your last 24 keystrokes (durations only, not which keys) and a short list of recent edit events (type and size, never text). Both are gone when the window closes.
Uninstalling typed.cc deletes everything above.
What do recipients see?
When you send, typed.cc adds a line such as “✅ typed.cc” or “73% typed.cc” to your message. If signing is on, a short typed-sig:2. line follows with your public key and a signature. These lines are part of your email, and Gmail delivers them like the rest of it.
Your public key is the same for every Gmail account in this browser, so someone who gets signed mail from two of your accounts can tell they come from the same person. Turn signing off to avoid that.
What can I control?
From the typed.cc popup you can stop adding the badge, turn off signing, hide badges on messages you read, and replace your signing key. Uninstalling removes all stored data.
Permissions
typed.cc requests only storage, for the records above, and access to https://mail.google.com/*, so it can run inside Gmail.
The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.
Questions
For questions about this policy, use the email link on Dima Dobrynin’s homepage.