Privacy Policy

1. Introduction

Welcome to DoorDash Wrapped ("we," "our," or "the Service"). DoorDash Wrapped is an unofficial, fan-made project that analyzes your DoorDash order history by accessing your Gmail emails. This privacy policy explains how we handle your data when you use our Service.

2. Data We Access

When you authorize DoorDash Wrapped to access your Gmail account, we request read-only access to:

• Gmail emails - Specifically, DoorDash receipt and confirmation emails
• Search query used: from:doordash (subject:"receipt" OR subject:"confirmation")
• Gmail API scope: https://www.googleapis.com/auth/gmail.readonly

We only access emails from DoorDash to extract order information. We do not access any other emails in your inbox.

3. How We Use Your Data

Your Gmail data is processed entirely within your web browser. Specifically, we:

• Parse DoorDash receipt emails to extract: restaurant names, order totals, items ordered, delivery addresses, and timestamps
• Calculate statistics such as: total spending, number of orders, favorite restaurants, most ordered items, and delivery patterns
• Generate visualizations and a "Wrapped" story similar to Spotify Wrapped
• Create shareable images using the html2canvas library (processed locally in your browser)

4. Data Storage and Retention

Your privacy is our top priority. Here's how we handle data storage:

• No server storage: We do not store any of your email data or statistics on any server
• Session-only data: Data exists only in your browser's memory during your active session
• Automatic deletion: All data is cleared when you close or refresh the page
• OAuth tokens: Access tokens are managed by Google Identity Services and follow Google's security standards
• No persistent storage: We do not use localStorage, cookies (except Google OAuth), or any other persistent storage mechanisms for your email data

5. Data Sharing

We take your privacy seriously and do not share your data:

• No third-party sharing: Your email data is never shared with any third parties
• No analytics: We do not use Google Analytics, Facebook Pixel, or any other tracking services
• No external API calls: The only external service we communicate with is the Gmail API
• User-initiated sharing only: You can download images of your statistics to share on social media, but this is entirely optional and controlled by you

6. Third-Party Services

DoorDash Wrapped uses the following third-party services:

• Google Gmail API: We use OAuth 2.0 to securely access your Gmail emails with read-only permissions. Your authentication is handled entirely by Google's secure infrastructure.
• Google Fonts: We load the Inter font family from Google Fonts for consistent typography.
• html2canvas: A client-side JavaScript library used to generate downloadable images of your statistics. This library runs entirely in your browser.

DoorDash Wrapped's use and transfer of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.

7. Security

We implement several security measures to protect your data:

• HTTPS only: The Service is accessible only via secure HTTPS connections
• No password storage: We never ask for or store your Gmail password
• OAuth 2.0: Authentication is handled securely by Google's official OAuth 2.0 system
• Client-side processing: All data processing occurs in your browser, eliminating server-side vulnerabilities
• No cookies: We do not set any cookies beyond those required by Google's OAuth system

8. Your Rights

You have complete control over your data:

• Revoke access: You can revoke DoorDash Wrapped's access to your Gmail at any time through your Google Account permissions page
• No data to delete: Since we don't store any data on servers, there is no data to delete. Simply close the browser tab to remove all session data
• No data portability needed: All processing happens in your browser session only

9. Contact Information

If you have questions or concerns about this privacy policy, please contact us:

Email:
Developer:

10. Changes to This Policy

We may update this privacy policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

Since the Service does not collect email addresses or contact information, we cannot notify you of changes directly. Please check this page before using the Service.