User Data Deletion

Last Updated: March 20, 2026

        ThunderSweep stores no user data on any server. All Gmail and Google Drive content is processed
        locally in your browser and never leaves your device. Deleting your data is fully in your control and takes
        under two minutes.
    

What Data ThunderSweep Holds

ThunderSweep stores data in two places — both entirely under your control:

Your browser (Chrome local storage): OAuth tokens, scan history metadata, user preferences, license key, and encrypted Vault key blob. No email or file content is stored here.
Your Google Drive (ThunderSweep Vault folder): Encrypted files you chose to move into your Vault. These are stored in your own Google Drive account, not on ThunderSweep servers.

ThunderSweep servers hold no personal data except:

A hashed version of your email address used for TS Share rate-limiting (automatically expires after 35 days).
Encrypted TS Share transfer blobs, only if you use the optional file-transfer feature (automatically deleted within 7 days or when claimed).

How to Delete All Your Data

Option A — Full deletion via the extension (recommended)

1 Open the ThunderSweep extension popup by clicking the ThunderSweep icon in your Chrome toolbar.

2 Go to Settings (gear icon).

3 Click Disconnect Account for each connected Google account. This revokes the OAuth token, removes your credentials from local storage, and clears scan history and preferences.

4 To also delete your encrypted Vault files from Google Drive, open your Google Drive, navigate to the ThunderSweep folder, and delete it. These are your files — ThunderSweep has no copy.

5 Uninstall the extension: go to chrome://extensions, find ThunderSweep, and click Remove. Chrome automatically clears all remaining local storage for the extension.

Option B — Revoke Google access without uninstalling

1 Go to myaccount.google.com/permissions.

2 Find ThunderSweep in the list of third-party apps with access.

3 Click Remove Access. This immediately revokes all OAuth tokens ThunderSweep holds for your account. ThunderSweep can no longer access your Gmail or Google Drive until you re-authenticate.

Request Manual Data Deletion

If you believe ThunderSweep holds any data about you that you cannot delete yourself (for example, a TS Share transfer that has not yet auto-expired), you can request manual deletion by contacting us:

Email: [email protected]
Subject line: Data Deletion Request
Include the email address associated with your ThunderSweep account so we can locate and purge any server-side records.

We will confirm deletion within 7 business days.

After Deletion

Once the extension is uninstalled and Google access is revoked:

ThunderSweep has no OAuth tokens and cannot access your Gmail or Drive.
All local scan history, preferences, and keys are permanently removed from your browser.
Any TS Share rate-limit records (hashed email only) expire automatically within 35 days.
Your Vault files remain in your Google Drive under your full control until you delete them.