Privacy Policy

This Privacy Policy describes how Storage Cleaner for Outlook & OneDrive ("Storage Cleaner," "we," "us," "our") handles information when you install and use the Storage Cleaner browser extension (the "Extension") for Google Chrome, and when you visit this website. Storage Cleaner is operated from California, United States. For any question about this policy, contact us at yair@cleanmicrosoftstorage.com.

Summary in plain language

Storage Cleaner helps you free up storage in your own Microsoft account across Outlook and OneDrive. Everything runs inside your own browser, on your own account. We never receive, store, or transmit the contents of your emails or files. The Extension connects to your Microsoft account with your permission and talks directly to Microsoft's own services to find what is taking up space and to move the items you select to Deleted Items or the OneDrive recycle bin. We run anonymous usage analytics (Google Analytics 4) so we can understand how Storage Cleaner is used and improve it; we never send your content, email address, file names, or any identifiers to analytics. Unlocking the cleanup features is a one-time payment handled through our license server and Stripe.

How the Extension accesses your Microsoft account

When you choose to connect, the Extension uses Microsoft's OAuth sign-in flow to obtain an access token for your own Microsoft account. That token stays in your browser and is used only to make requests directly to Microsoft's own APIs (Microsoft Graph for Outlook and OneDrive) and, where needed, Microsoft's own pages. The token is never sent to us. You can revoke the Extension's access at any time at account.live.com/consent/Manage.

What the Extension reads, and why

The Extension requests the minimum Microsoft access needed to find and remove storage-consuming items that you select:

• Outlook mail: to find messages such as large attachments, old promotional and social mail, and items in Deleted Items and Junk, and to move or permanently remove the ones you select. The Extension uses this access only for the storage-cleanup features described in this policy. It does not send email on your behalf or use your messages for any other purpose. It reads message metadata such as sender, subject, and size to group and size results.
• Outlook rules: to create a rule that automatically moves future mail from a sender you choose to Deleted Items, only when you ask it to.
• OneDrive: to list your files by size, identify large files, duplicates, and old file versions, and move the ones you select to the OneDrive recycle bin.
• Microsoft account email address: to show which account you are connected to.

This information is processed in your browser to display your cleanup options and carry out the cleanups you approve. It is not transmitted to us.

How scanning and recycle-bin cleanup work behind the scenes

Microsoft's public APIs for personal Microsoft accounts do not expose the contents of the OneDrive recycle bin. To let you review and empty items already sitting in the recycle bin, the Extension briefly loads your own signed-in OneDrive recycle-bin page in a hidden background page rather than a visible browser tab, and reads only the items and sizes that page already displays. This is only a different way of showing you the same page Microsoft would show you anyway; it does not grant access to anything you have not already granted through your Microsoft sign-in.

You review before anything changes

Nothing is removed without your approval. Most cleanups move the items you select to Outlook's Deleted Items folder or the OneDrive recycle bin, where you can review or restore them for about 30 days before Microsoft deletes them permanently. Some actions, such as emptying Deleted Items or the recycle bin, are permanent and are clearly labeled before you confirm.

Payments

Scanning is free. Unlocking the cleanup features is a one-time payment, with no subscription. When you choose to unlock, the Extension generates a random, anonymous identifier for your installation (an "install ID") and sends it to our license server to start a Stripe checkout session and, afterward, to check whether that install has paid. So that your purchase survives reinstalls, the Extension also sends an anonymized one-way hash of your Microsoft account's internal ID (a numeric ID from Microsoft, not your email) alongside the install ID. This hash cannot be reversed into an email address or any other identity; it only lets us recognize the same Microsoft account across installs on the same computer or a new one. The license server stores only the install ID, the anonymized account hash, and whether that install has paid; it never receives your name, email address, Microsoft data, or card details. Your card payment and any receipt email are handled entirely by Stripe under Stripe's privacy policy at stripe.com/privacy.

Information stored locally on your device

The Extension uses Chrome's storage to keep a small amount of state on your device. This is not transmitted to us, except the two analytics and licensing identifiers noted below. It includes: your settings and protections; your most recent scan results and cleanup progress; which cleanups you have marked reviewed; a cached copy of your unlock and plan status; connected-account labels; an anonymous licensing install ID; and an anonymous analytics identifier. Removing the Extension clears this local state.

What we do not collect

To be specific, the Extension does not collect, store, or transmit to us: the contents of your emails or files; your name, phone number, or postal address; your Microsoft authentication tokens (these stay in your browser); your browsing history, web activity, keystrokes, or mouse movements; or any advertising identifiers. We do not load third-party tracking scripts into any Microsoft page.

Analytics

We use Google Analytics 4 (GA4) to understand how Storage Cleaner is used so we can improve it.

Extension analytics: The Extension sends GA4 events from its background service worker using the Measurement Protocol. A strict filter blocks any personal or content data from being sent. We never send email content, senders, subjects, file names, file or message IDs, URLs, search queries, keywords, or your email address. The information sent is limited to: an anonymous random identifier generated locally to distinguish one install from another (separate from the licensing install ID, and not tied to your Microsoft account or email); your plan tier; the Extension version; how many days since install; and event names with high-level, size-bucketed outcomes. Item counts and amounts of storage are sent as ranges, not exact values.

Website analytics: This website uses GA4 to record page views and outbound install clicks. We do not enable ad personalization or Google Signals, and we do not use this data for advertising.

We do not sell, share, or use any of this data for advertising.

How we use information

Locally stored information is used solely to operate the Extension: run your scans, apply your protections, restore progress, remember what you reviewed, and cache your unlock status. License-server information is used solely to process payment and verify unlock status. Analytics information is used solely to understand use in aggregate, prioritize fixes and features, and detect reliability problems. We do not use any information for advertising or profiling of individual users.

Sharing and disclosure

We do not sell, rent, or share user data with third parties for marketing or advertising. The third parties with which limited data is shared are: Google (for the anonymous usage analytics described above), Stripe (for one-time payment processing), and our hosting provider. We may disclose information if required by law or valid legal process, or to protect the rights, property, or safety of users or the public.

Data retention

Locally stored data persists on your device until you remove the Extension or clear your Chrome storage. The license server retains the anonymous install ID and account hash and their paid status for as long as needed to honor your purchase. To request deletion of your install record, contact us at yair@cleanmicrosoftstorage.com.

Your rights

The Extension does not collect identifying personal information directly. To remove all locally stored data, uninstall the Extension. To revoke the Extension's access to your Microsoft account, visit account.live.com/consent/Manage. If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, port, restrict, object to, and erase your personal data. If you are a California resident, you have the right to know what personal information is collected, request its deletion, and opt out of any sale or sharing; we do not sell or share personal information. Contact us at yair@cleanmicrosoftstorage.com for any privacy request.

Children

Storage Cleaner is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Security

The Extension stores its local state using Chrome's built-in storage, which is sandboxed to the Extension. Your OAuth token stays in your browser. We do not operate any server that holds your Microsoft data. Stripe maintains industry-standard security for the payment data it handles.

Changes to this policy

We may update this Privacy Policy as the Extension evolves. Material changes will be reflected in the "Last updated" date at the top of this page.

Trademark notice

Storage Cleaner is an independent Chrome extension and is not affiliated with, endorsed by, or sponsored by Microsoft. Microsoft, Outlook, and OneDrive are trademarks of the Microsoft group of companies.

Contact

Privacy questions or data requests: yair@cleanmicrosoftstorage.com.