Last updated: 5 November 2026.
TidyMail Sign-in exists for one purpose: to hand a Google sign-in result to the TidyMail installation owned by the person signing in.
What it handles: when you sign in with Google, this service receives an authorisation code from Google and exchanges it for access tokens, which it passes directly to your TidyMail installation.
What it keeps: nothing. The service has no database and writes nothing to disk. Pairing sessions and tokens exist only in memory, expire within minutes, and each sign-in result can be collected exactly once. Its logs contain timestamps and event types only - never message content, email addresses, or credentials.
What it never does: it never reads, stores, or transmits the contents of any mailbox. Mail itself flows only between your TidyMail installation and Google.
Contact: agoura@duck.com