Superstatus is operated by David Schaap, a private individual in the Netherlands, as a personal project. Questions and deletion requests go to the address you were invited from.

When you connect your mailbox, Superstatus reads messages that look like they are about an order and keeps only the facts it extracts from them: shops, order numbers, products and prices, parcels and tracking numbers, delivery dates, return windows, discount codes, refunds. It also stores the PDF invoices a shop attached, the product images a shop linked to, and, for each message it used, the Gmail message id, the sender, the subject and the date.

The body of an email is never stored. Not in the database, not in file storage, not in a log, not in an error report. Short quotes are kept where they are evidence for something shown to you, such as a shop’s own sentence about its return window, and those are capped at 200 characters.

A message that turns out not to be about an order keeps even less: its id, the sender’s domain, the date, and the fact that it was rejected. No subject, no quotes. That record exists only so the same message is not fetched and read twice.

So that we can see whether Superstatus is used, it also notes the days you open it, how many times, and whether that was on an iPhone, an Android phone or a computer. Not what you looked at, and it is counted only as a total across everybody.

Until you delete it. Superstatus has a Delete everything action that removes every row, every stored file and the access token itself, immediately and completely. Parcel tracking data is deleted 30 days after delivery whether or not you ask.

Three processors, and no one else. Google provides access to your mailbox under permission you grant and can revoke at any time from your Google account. Anthropic receives the text of order-looking messages so that Claude can read the order out of them. That happens under Anthropic’s commercial terms, which mean the content is not used to train models and is deleted within 30 days.

TypeSafe receives the sender’s name and the subject line of order-looking messages, and nothing else of them, so that a newsletter that merely sounds like an order is never read at all. TypeSafe’s terms say it does not train models on what it is sent and passes it to no one but its own service providers. It is a company in the United States.

When you ask whether something you bought is cheaper now, Superstatus fetches the shop’s own product page and sends that page to Anthropic to read the price off it. If the shop’s email is the only place the link to that page exists, that email is fetched again from your mailbox and sent along so Claude can find the link in it. Neither is stored: what is kept is the address of the page and the two prices. The shop itself only ever sees an ordinary visit to its website, never who is asking.

If you switch on notifications on a device, they travel through that device’s own push service: Apple’s, Google’s or Mozilla’s. Each notification is encrypted for your device before it leaves Superstatus, so the push service carries it without being able to read it, and it names the shop and what happened, never what you bought.

Nothing is sold, shared or used for advertising. Nothing derived from your mailbox is shown to another user. The one shared thing in the system is what Superstatus has learned about shops from the public web, such as a shop’s return policy page, and that never contains anything from anyone’s mail.

No human reads your messages. The single exception is one you start: if Superstatus gets an order wrong, Report a problem shows you exactly which messages are involved and asks whether the operator may look at those specific messages. Your answer is recorded with a timestamp, the messages are fetched one at a time when they are viewed, and nothing is copied or kept.

You can disconnect your mailbox, which revokes the token at Google and stops all reading while leaving your data readable. You can delete everything, which leaves nothing behind. You can ask what is held about you and get a straight answer, because it is your data and there is not much of it.