Is MergeMail safe?

Clean risk

MergeMail reads Gmail compose content — body, subject, and all recipients — and sends it to mergemail.co before each email is sent.

When a user composes or previews a Gmail message, the extension collects the full email body, subject line, and all recipient addresses (To, Cc, Bcc) via the Gmail compose API. This data is POSTed to www.mergemail.co/campaigns/prepare through the extension's background script on the presend event. The user's Gmail address is also transmitted as a URL parameter when the extension loads its sidebar iframe.

Rentroom Incv1.5.2Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

www.mergemail.co
Updated 17 September 2026plbgdpcficmecmpjceogkfmdgfdjedfm