Last updated: February 18, 2026
What this is
I originally built VT Email Saver as a tool for myself so I didn't
need to worry about relogging every couple of months. I had a couple
friends lose their access to VT Google services and decided to share
it publicly to help other Virginia Tech students and alumni keep their
university Gmail accounts from being deactivated. Every line of code
is on GitHub — you can audit it
yourself.
What data I collect
- VT email address — stored as a plaintext account identifier. This is visible to the site administrator but is only used to identify your account and log in on your behalf.
- VT password — encrypted with AWS KMS before it touches the database. The plaintext is never written to disk or logged. It is only decrypted momentarily by the automated login system at login time and discarded immediately after.
- Phone number (optional) — only stored if you opt in to SMS text messages. Phone numbers are transmitted to Twilio only to deliver the messages you requested. We do not sell, rent, or share SMS opt-in information or phone numbers with third parties.
- Notification email (optional) — only stored if you choose to receive reminders at a different address.
How I use your data
- Periodically log in to your VT Gmail via an automated browser session to prevent account deactivation.
- Send you reminders (email and/or SMS) before each scheduled login so you can approve the Duo 2FA push.
The automated session only logs in to keep your account active — it does not open, read, or interact with any emails, files, or account data. Your password is never visible to me; I can see your email address as an account identifier but have no access to your VT account itself.
SMS notifications
- You must explicitly opt in via checkbox to receive SMS text messages from VT Email Saver (operated by Thomas Feuerbach). Messages are sent only by VT Email Saver — not by Virginia Tech or any other organization.
- Messages are automated account notifications containing Duo verification codes needed during scheduled logins.
- Message frequency varies based on your chosen login cadence (1–90 messages per 90-day period).
- Standard message and data rates may apply.
- Reply STOP to unsubscribe at any time.
- Your phone number is used only to deliver SMS messages you opted into via Twilio. We do not sell, rent, or share SMS opt-in information or phone numbers with third parties.
Data security
- Credentials are encrypted using AWS Key Management Service (KMS). Encryption keys live in Amazon's hardware security modules and never leave AWS.
- All traffic is served over HTTPS via Cloudflare.
- Session cookies are HTTP-only and same-site restricted.
Data retention & deletion
Your data is retained only while your account exists. You can delete your account and all associated data at any time from the dashboard. When you do, your encrypted credentials, phone number, and notification preferences are permanently removed from the database.
Third-party services
- AWS KMS — credential encryption
- AWS SES — email delivery
- Twilio — SMS delivery (only if you opt in)
- Cloudflare — DNS and tunnel
I don't use any analytics, tracking pixels, or advertising services.
Contact
Questions, concerns, or feedback? Feel free to
open an issue on GitHub.