# Privacy Policy — Undo Send Queue

**Last updated:** July 10, 2026

## Summary

Undo Send Queue does **not** collect, transmit, sell, or share any personal data or email content with the developer or any third party.

## Data the add-on accesses locally

To provide undo-send functionality, the add-on temporarily accesses the following information **only on your device**:

- Email subject line (shown in the queue UI and undo notification)
- Compose window metadata needed to restore the compose window if you undo a send
- Queue metadata (subject, send time, internal queue ID) stored in Thunderbird local extension storage

The add-on does **not** read your inbox, contacts, or previously received messages.

## Data storage

Queue settings and pending send metadata are stored using Thunderbird's `storage.local` API on your computer only. This data is removed when a queued send completes or is cancelled.

## Network activity

This add-on makes **no network requests**. It does not contact any external server.

## Notifications

The add-on may show a local system notification with the message subject so you can undo a send. Notification content stays on your device.

## Permissions explained

| Permission | Purpose |
|------------|---------|
| `compose` | Intercept outgoing send and allow undo before delivery |
| `notifications` | Show local undo notification |
| `storage` | Save queue state and user preferences locally |
| `alarms` | Schedule delayed send |
| `windows` | Open the optional queue drawer window |

## Data sharing

No data is shared with the developer or third parties.

## Children's privacy

This add-on is not directed at children and does not knowingly collect data from anyone.

## Changes

If this policy changes, the updated text will be published with future add-on releases and on the add-ons.thunderbird.net listing page.

## Contact

For privacy questions, contact the developer through the support channel listed on the add-ons.thunderbird.net listing page.