Yup, you can see right in the manifest file that it can only access mail.google.com: - https://github.com/pehrlich/GTalkSyntax/blob/master/manifest.json#L17 ht

Yup, you can see right in the manifest file that it can only access mail.google.com: - https://github.com/pehrlich/GTalkSyntax/blob/master/manifest.json#L17 https://github.com/pehrlich/GTalkSyntax/blob/master/manifest... And view all the source code, right here: https://github.com/pehrlich/GTalkSyntax/blob/master/javascripts/highlight.coffee https://github.com/pehrlich/GTalkSyntax/blob/master/javascri... (This is the one file that does almost all the work) I really would like to make it as safe and constrained as possible, but by nature this is working with personal data. I think the best thing I can do is to keep it all open source, think about privacy, and encourage people to read the code as much as possible. Anyway, thanks for having a look!