Privacy
What Surface Again does
Surface Again is a Chrome extension for Gmail. When you choose a time, it writes a reply on the open thread, addressed only to you, and hands it to Gmail's own "Schedule send". Gmail delivers it at that time, so the thread returns to the top of your inbox. The extension runs entirely inside your browser.
What we collect
| Data | Why | Kept for |
|---|---|---|
| A random install ID (not linked to your Google account; if you buy Unlimited, it is linked to your license) | To count how many people use the extension | 90 days, then only monthly totals are kept |
| Event names with timestamps: installed, surfaced, undo (and whether Gmail's leftover draft was cleared), already set, cancelled in Gmail, upgrade clicked, key activated, and failed (with a short reason code such as "reply_button_not_found", never email content) | To learn which features matter and to notice when a Gmail change breaks something | 90 days, then only monthly totals are kept |
| Extension version | To know which build a bug is in | Same |
| If you remove the extension and answer the one question on the goodbye page: the reason you picked and anything you typed (up to 1,000 characters) | To learn why people leave | 12 months |
| If you buy Unlimited: your license key, the email address you bought with (passed to us by our checkout partner), and the random install IDs of the browsers using the key (up to 5 at a time) | To keep your plan active, send you your key, and stop a key being shared widely | While the subscription is active, then deleted 12 months after it ends. A browser that hasn't used the key for 30 days is removed from it sooner |
| Your email address, only if you type it into a "notify me" or "tell me when it's live" box on this site, plus which plan or feature you asked about and, for the team plan, the team size and email system you picked | To tell you when that thing is available, and to know how many people want it | Until that announcement, then deleted |
What we never collect
Email subjects, bodies, attachments, contacts, your Gmail address, or your browsing. No email content ever leaves your browser. The extension requests access to mail.google.com only. It sends the counts above to one server of ours, api.surfaceagain.com; the Gmail toolkit it is built on also sends error reports to its own maker, described under "Gmail toolkit" below.
Where it runs
In Chrome, on your computer. The threads you've set to come back (with their subject line and which of your Gmail accounts they belong to), your monthly count and your license key are kept in Chrome's local extension storage on your computer. Of these, only the license key is sent to us, to check that it's valid. The counts above go to a server at Cloudflare.
Gmail toolkit (InboxSDK by Streak)
Surface Again uses InboxSDK, a widely used toolkit made by Streak for building Gmail extensions, to place its button in Gmail. We've switched off the toolkit's optional usage tracking, but it always sends Streak technical error reports and a few basic "the toolkit started" events. These include a one-way scrambled code made from your Gmail address (not the address itself), the error details, the toolkit and extension versions, and the Gmail page address. They go to api.inboxsdk.com and to Google Cloud (pubsub.googleapis.com), which Streak uses to receive them. They never include the content of your emails. Streak handles them under its own privacy policy, published at streak.com.
Cookies
None. This website sets no cookies and runs no analytics scripts. The extension sets none.
Who else sees it
Cloudflare (hosting and the counts server), Streak (the Gmail toolkit's error reports; see above), our checkout partner (if you buy), and Google (Gmail itself, which you already use, and Google Fonts on this website; see below). No data is sold, shared for advertising, or used for any purpose other than those stated here.
Fonts on this website
Pages on surfaceagain.com load their fonts from Google Fonts. When you open a page, your browser asks Google's servers for the font files, so Google receives your IP address and the address of the page, as with any file your browser downloads. Google Fonts sets no cookies. How Google handles that request is covered by Google's privacy policy. The extension itself doesn't load anything from Google Fonts.
Who is responsible
Surface Again is responsible for the data described here. Write to privacy@surfaceagain.com for anything about this page.
Your rights
Ask for a copy, a correction, or deletion of anything tied to your install ID or email address by writing to privacy@surfaceagain.com. We answer within 7 days. This applies to everyone, including under the GDPR, the CCPA, and Argentina's Ley 25.326.
Google user data
Surface Again does not currently request any Google API permission or access Google user data through Google APIs. If a future version does, this page will be updated first and that use will comply with the Google API Services User Data Policy, including the Limited Use requirements.
Changes
If this page changes in a way that matters, the effective date above changes. If you have a paid plan, we also email you about the change before it applies.
Contact
Surface Again · Terms · Refunds · privacy@surfaceagain.com · hello@surfaceagain.com