Browser extension privacy policy

What this extension does

When you click the extension icon, it reads the page you are on, analyzes it, and shows an AI readiness score plus recommendations. All of this analysis runs inside your browser and needs no account.

Separately, if you are a SurfacedBy customer on a Pro plan, you can connect your account to turn on the optional reply copilot on Reddit and X. The copilot is off until you connect it, and connecting it is the only part of the extension that talks to SurfacedBy servers.

What leaves your browser

• Nothing from the page you are viewing. Page text, the URLs you visit, and headers stay on your device.
• robots.txt requests. To check which AI bots can reach a site, the extension fetches that site's own /robots.txt file directly from the site. SurfacedBy servers are not involved.
• Opening the SurfacedBy link. If you click a link to track your AI visibility, a new tab opens to surfacedby.com. Only then does SurfacedBy receive a request from your browser, and only because you asked for it.
• Reply copilot (only if you connect it). When the copilot is connected and you act on a Reddit or X thread, the extension sends that thread's link and visible details (title, snippet, author) to SurfacedBy to bring or draft a reply, and, after you post the reply yourself, the text you posted and its link so SurfacedBy can track how it performed and learn from your edits. The extension never posts for you and never reads your private messages or other pages. The free analyzer above stays entirely on your device.

What this extension stores

• A short-lived in-memory cache of the last score per tab, cleared when you close the browser.
• If you connect the reply copilot, a scoped, short-lived access token is kept in the extension's local storage so the background worker can talk to SurfacedBy on your behalf. It is limited to the reply copilot and is never exposed to the web pages you visit. It expires on its own, reconnecting replaces it, and Disconnect (in the extension or the dashboard) removes it immediately.
• No cloud sync. The extension does not use chrome.storage.sync.

Permissions we request

• activeTab: lets the extension read the page you are currently viewing, only when you click the icon.
• storage: keeps the last score for a tab and, if you connect the copilot, the scoped access token.
• Host access to api.surfacedby.com, reddit.com, and x.com: lets the connected copilot talk to SurfacedBy and assist replies on Reddit and X. Used only when the copilot is connected.

Third parties

None. The extension does not include trackers, advertising SDKs, or analytics tags.

Children

The extension is not targeted at children under 13 and does not knowingly collect information from them.

Contact

Questions or concerns? Email [email protected].