Privacy

What is stored

Inbound messages, sender address, subject, text body, attachment metadata, and the time the message was received. Remote images are not fetched or stored.

How long

Messages are kept for seven days from receipt. An hourly cleanup job removes expired messages. Account and audit records follow the deployment's configured retention.

Who can access

Members can access inboxes they own. The deployment owner can administer accounts and inspect the service. This is not an end-to-end encrypted mailbox.

Cookies

The mail application uses a single HTTP-only session cookie for authentication. The marketing page does not set cookies.

Contact

For privacy requests, contact the operator of this deployment.