Privacy Policy

Last updated: June 6, 2026

Selfhosted ("we", "us") provides private email services through our web client and our desktop and mobile apps (collectively, the "Service"). This policy explains what personal data we process, why, and the choices you have. We designed the Service so that we collect as little as possible. We do not sell your data, we do not show ads, and we do not scan the contents of your mail for advertising or profiling.

1. Information we collect

• Account information. The email address and display name you use to create your account, and authentication credentials (passkeys / public keys). We never store passwords in plain text.
• Mailbox content. The emails, attachments, folders, contacts and settings you create or receive. This is stored so the Service can function — it is your data, held on your behalf.
• Technical and security logs. Limited connection metadata (IP address, timestamps, client type) needed to operate the Service, prevent abuse, and diagnose problems. These logs are retained for a short period and then deleted.

2. How we use information

• To deliver, secure, and maintain your email account.
• To send and receive your messages and sync them across your devices.
• To detect and prevent spam, abuse, and unauthorized access.
• To provide support when you contact us.

We do not use your mailbox content for advertising, profiling, or training third-party systems, and we do not sell or rent your personal data to anyone.

3. Data collected by our apps

Our mobile and desktop apps store your account credentials and a local cache of your mail on your device so the app can show messages and notify you of new mail. This data stays on your device and on your mailbox server. The apps contain no third-party advertising SDKs and no analytics trackers.

4. Sharing and third parties

We share data only with infrastructure providers strictly necessary to run the Service (for example, email delivery and content-delivery networks), and only to the extent required to provide it. These providers are bound to process data on our instructions. We may disclose information if required by law, or to protect the rights, safety, and security of our users and the Service.

5. Data retention and deletion

We keep your mailbox data for as long as your account is active. You can delete your account at any time, which permanently removes your mailbox and associated personal data from our systems. See how to delete your account.

6. Security

All connections to the Service are encrypted in transit using TLS. Data is stored on access-controlled infrastructure. We support phishing-resistant passkey authentication.

7. Your rights

You may access, export, correct, or delete your personal data. To make a request, or to ask any privacy question, email [email protected].

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from them.

9. Changes to this policy

We will update this page when this policy changes and revise the date above. Material changes will be communicated through the Service.

10. Contact