Privacy Policy

What we do

unsubscrib is a free service that helps you unsubscribe from marketing emails. You sign in with your Google account and grant us read-only access to your Gmail inbox. We scan your recent email headers to identify subscriptions, then use browser automation to complete the unsubscribe process on your behalf.

Google user data

unsubscrib's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We request the following Google API scope:

• gmail.readonly — read-only access to your Gmail messages. We use this to read email headers (From, Subject, List-Unsubscribe, List-Unsubscribe-Post) to identify subscriptions and extract unsubscribe links. We do not read or store the body of your emails.

Your Google OAuth access token is encrypted using AES-256-GCM and stored in a secure, httpOnly session cookie on your browser. Tokens are automatically discarded when your session expires (24 hours) or when you log out. We do not store your Google access token on our servers.

Data we process

When you use unsubscrib, we temporarily process:

• Email metadata — sender address, subject line, and unsubscribe headers from your recent emails
• Unsubscribe URLs — extracted from email headers to complete the unsubscribe process

Data retention

We do not store your email content or metadata. All email data is processed in memory on our servers and discarded immediately after your scan completes. We may retain minimal logs (sender domain and success/failure status) for up to 30 days for debugging and service improvement. These logs do not contain email content, subject lines, or your email address.

Third-party services

We use the following third-party services:

• Google Gmail API — to read your email headers with your authorized consent. Google's privacy policy applies to data handled by Google.
• Browser Use — to automate complex unsubscribe forms that cannot be completed via one-click unsubscribe. We send only the unsubscribe URL to this service, not your email content.
• Vercel — to host our website and API

What we don't do

• We don't sell or rent your data
• We don't use your data for advertising or profiling
• We don't read or store the body of your emails
• We don't share your Google user data with third parties except as described above to deliver the service
• We don't use your Google user data for training machine learning or AI models

Revoking access

You can revoke unsubscrib's access to your Google account at any time by visiting your Google Account permissions. You can also log out of unsubscrib at any time, which will delete your encrypted session cookie.

Your rights

You can request deletion of any data we hold about you by contacting us. Since we don't store email content, there's typically nothing to delete beyond minimal operational logs.

Contact

Questions about this privacy policy? Email us at privacy@unsubscrib.io