inscope.app

Most inbox cleaners ask you to hand over your email credentials to a third-party server. inscope.app is a Gmail manager where your emails never leave your browser — no backend, no data collection, no subscription.

Built as a fully static frontend (React + TypeScript on Vite), the app authenticates via Google's OAuth 2.0 PKCE flow and makes all Gmail API calls directly from the browser. Emails are grouped by sender using metadata-only thread fetches to minimize quota usage and avoid touching message bodies. Bulk delete is handled through batched Gmail API trash calls, and List-Unsubscribe headers are parsed client-side to power one-click unsubscribes. Tokens live in sessionStorage only and are cleared on tab close — intentionally.

Currently in active beta. The core loop — sign in, see unread mail grouped by sender, unsubscribe or bulk delete in one click — is fully functional and deployed on Vercel. The app fetches up to 1,000 unread messages per session and updates the sender list in real time as you act on emails.

The constraint of "no backend, ever" shaped every architectural decision: PKCE instead of server-side OAuth, metadata-only API calls, client-side filtering and grouping. It also became the product's clearest selling point.