Last updated: 26 July 2026
Operator: Ariana Correia Santos da Silva, Auckland, New Zealand
Contact: support@opendot.app
1. Summary
Opendot is a Chrome extension that tells you when an email you sent has been opened. It does this by adding a small, invisible image to your outgoing messages. When the recipient's email program loads that image, we record the event and notify you.
This policy explains what we collect, why, how long we keep it, and what your rights are. It covers two different groups of people:
- Users — people who install the extension and create an account
- Recipients — people who receive an email sent by a user
Recipients do not have an account with us and have not agreed to anything. We take that seriously, and section 4 is specifically about them.
2. Who we are
Opendot is operated by Ariana Correia Santos da Silva, based in Auckland, New Zealand. We are the agency responsible for the personal information described here under the New Zealand Privacy Act 2020.
For any privacy question or request, contact support@opendot.app.
3. Information we collect from users
Account information
- Email address
- Encrypted password
- Account creation date and sign-in timestamps
Email metadata. When you send a tracked email, we store:
- Subject line
- Recipient email addresses
- Time sent
- Whether tracking was enabled or disabled for that message
We do not store the body of your emails. We do not read your inbox. The extension only interacts with the message you are actively composing.
Technical information
- The IP address your browser last connected from, used to recognise when you are viewing your own sent messages so we do not report them as recipient opens
- Subscription plan and billing status
4. Information we collect about recipients
This is the part that matters most, and we state it plainly.
When a recipient opens an email sent through Opendot, their email program requests an image from our server. At that moment we record:
- The time of the request
- The IP address that made the request
- The browser or email client identification string (user agent)
- Which tracked email it relates to
Important limitation: with Gmail and most modern email providers, the image is fetched by the provider's proxy servers, not by the recipient's own device. In those cases the IP address we see belongs to a data centre — typically Google's — and not to the recipient. We do not attempt to identify recipients personally, and we do not build profiles of them.
If a recipient clicks a tracked link, we record the same information plus which link was clicked, then forward them to the original destination without delay.
How recipients are informed. Emails sent on our free plan include the visible line "Sent with Opendot" at the bottom of the message. This is intentional: it tells recipients that tracking is in use.
Paid plans do not include this line. If you use a paid plan, you are responsible for meeting any disclosure obligations that apply to you under the laws of your country and your recipients' countries. We recommend telling recipients you use read receipts.
Recipient rights. If you have received an email tracked by our service and want your data removed, or want to know what we hold about you, contact support@opendot.app. We will respond within 20 working days as required by the Privacy Act 2020.
5. Why we collect this information
| Purpose | Information used |
|---|---|
| Provide the core service (open and click reporting) | Email metadata, open and click events |
| Distinguish genuine opens from automated fetches | IP address, user agent, timing |
| Avoid reporting your own views as recipient opens | Your IP address |
| Operate your account and subscription | Account and billing information |
| Detect abuse and keep the service running | Technical logs |
We do not use your information for advertising. We do not sell it.
6. Who we share information with
We use the following service providers, who process data on our behalf:
- Supabase — database and authentication hosting (servers located in Sydney, Australia)
- Stripe — subscription payments. Stripe handles card details directly; we never receive or store them.
- Google — the Chrome Web Store distributes the extension
We do not sell, rent, or trade personal information. We disclose information to third parties only where required by law.
Because our hosting is in Australia, your information is stored outside New Zealand. We have satisfied ourselves that comparable safeguards apply, as required by Information Privacy Principle 12.
7. How long we keep information
- Account information — while your account is active, and for 30 days after deletion
- Email metadata and tracking events — 30 days on the free plan; for the life of the account on paid plans
- Technical logs — up to 90 days
You can delete your account at any time by contacting us. Deletion removes your account, your tracked emails, and all associated open and click events.
8. Security
Access to your data is restricted at the database level so that you can only ever read your own records. Passwords are stored hashed, never in plain text. All communication between the extension and our servers is encrypted in transit.
No system is perfectly secure. If a breach occurs that is likely to cause serious harm, we will notify affected people and the Office of the Privacy Commissioner, as the Privacy Act 2020 requires.
9. Your rights
Under the New Zealand Privacy Act 2020 you may:
- Request a copy of the personal information we hold about you
- Request correction of information that is wrong
- Request deletion of your account and data
- Complain to us, and if unsatisfied, to the Office of the Privacy Commissioner (privacy.org.nz)
If you are in the European Union or the United Kingdom, the GDPR gives you additional rights, including data portability and the right to object to processing. Our legal basis for processing recipient data is legitimate interest in delivering a read-receipt service; you may object to this at any time using the contact address above.
10. Children
Opendot is not intended for anyone under 16. We do not knowingly collect information from children.
11. Changes to this policy
If we change this policy materially, we will notify account holders by email at least 14 days before the change takes effect. The date at the top of this page always reflects the current version.
12. Contact
support@opendot.app
Ariana Correia Santos da Silva, Auckland, New Zealand