Cookie Policy

1.1 This policy lists every cookie and browser storage key this site sets, why it exists, and how long it lives. It covers the web inbox, the marketing pages, the account area, and the admin panel.

1.2 The site is built to work with almost nothing. There is no analytics script, no tag manager, no third-party pixel, and no advertising cookie set by us.

1.3 Cookies are small text files a site asks your browser to store and send back on later requests. Local storage is a similar browser store that a site reads in JavaScript but that is never sent with a request.

2.1 One cookie is required for the product to function.

2.2 This cookie carries a random identifier. It contains no email address, no name, and no plan information. Everything else is looked up server-side from that identifier.

2.3 Because mailboxes are bound to this cookie, blocking it does not degrade the product gracefully: it produces a fresh empty inbox on every load, and previously created addresses become unreachable from that browser.

3.1 One key is stored locally and never transmitted.

3.2 The value is a single word. Clearing it only changes the appearance back to the default.

4.1 This deployment can show sponsor creatives in reserved slots on the home page, the blog, and the inbox sidebar. Those creatives are served from this domain, not from a third party.

4.2 A click on a creative goes through a server redirect on this domain so the operator can count it. That redirect sets no cookie and keeps no per-visitor record: it increments a counter attached to the creative.

4.3 If the operator of this deployment connects an external ad network, that network may set its own cookies and its own policy applies to them. The operator is required to disclose that in this section when it happens. As shipped, no external network is connected.

4.4 Ads can be switched off entirely by the operator, and paid plans hide them for signed-in customers.

5.1 Every major browser lets you view, block, and delete cookies, usually under Privacy or Site Data in settings. Blocking the session cookie breaks the inbox as described in 2.3.

5.2 Clearing site data deletes your open addresses from this browser. The mailboxes still exist on the server until their timer expires; you simply lose the session that could read them.

5.3 Private browsing windows discard these stores when the window closes, which is a clean way to use the inbox once and leave nothing behind.

5.4 Do Not Track and Global Privacy Control signals are honoured in the sense that there is nothing extra to switch off: no analytics and no third-party advertising exist in this deployment to be suppressed.

6.1 Adding a cookie or storage key means updating this page in the same release. The effective date at the top tells you when the list last changed.

6.2 Questions about this policy: [email protected]. The wider picture of how personal data is handled is in the Privacy Policy.