MergelinePrivacy policy
Last updated 29 October 2026
Mergeline sends personalized emails from your own Gmail account. It runs in your browser. We built it so that we never receive your contacts, your emails or your Gmail data.
What stays on your computer
Your recipient lists, the emails you write, campaign results (who was emailed, who replied, reply snippets), templates, your do-not-email list and your settings are stored in your browser's extension storage. They are not sent to us. You can download a backup or erase everything in Settings, and uninstalling the extension deletes it.
What leaves your computer, and where it goes
| Data | Sent to | Why |
|---|---|---|
| The emails you send (recipient, subject, body) | Gmail, in your own account | To deliver your emails. When you use the Gmail tab, Mergeline fills Gmail's own compose window. With Google sign-in, it uses Gmail's official interface. |
| Gmail searches for replies and bounces | Gmail, in your own account | To stop follow-ups for people who replied and to skip addresses that bounced. Results stay in your browser. |
| Email text you ask AI to write or improve | The AI provider you choose (OpenAI, Anthropic or Google), using your own key | Only when you turn on AI and press an AI action. Nothing is sent if AI is off, or if you use your browser's built-in model. |
| The domain part of addresses you check (for example example.com) | Cloudflare's public DNS service | Only when you press “Check addresses”, to find domains that cannot receive email. |
| A Google Sheets link you import | Google Docs | To download that sheet as CSV. |
| Your license key and a random install ID | Mergeline's license server | Only if you buy Pro, to activate and check your license. |
Google user data
If you choose Google sign-in, Mergeline asks for permission to send email (gmail.send) and, only if you turn on reply detection, to read message headers and snippets (gmail.readonly). This data is used only inside your browser to send your campaigns and detect replies. It is never stored on or sent to our servers, never sold, never used for advertising, and never read by people. Mergeline's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The sign-in token is kept in temporary browser storage and removed when you disconnect.
No tracking
- No tracking pixels or link redirects are added to your emails.
- No analytics, ads or third-party trackers run in the extension.
- We do not sell or share any data.
What our license service stores
For each purchase we store the license key, the Paddle transaction ID, the Paddle customer ID, the Paddle subscription ID and its status, the random IDs of browsers where the key is active, and when the license was created. We use this only to deliver and verify your license, and to email you your key. The service runs on Cloudflare, which may keep short-lived request logs, including IP addresses, for security and reliability.
Payments
Paddle is our merchant of record. Paddle collects your name, email, billing details and payment information to process your order, under Paddle's privacy policy. We never see your card details.
Cookies and analytics
This website doesn't use analytics or tracking cookies. The checkout on /buy loads Paddle's checkout, which may set cookies needed to process payment.
Your choices
Disconnect Gmail, turn off AI, export or erase your data at any time in Settings. Removing the extension removes all its data from your browser. You can ask us to show you or delete the license data linked to your purchase; deleting it deactivates your license.
Contact
Questions: support@getmergeline.com.