Security and privacy

What the server sees

The sender and the time of each mail. Your IP address when you connect. The plain text of a message for the moment it arrives, before it is locked.

What it can’t do

Read mail that is already stored. Tell from the addresses themselves that they are yours. Learn who you are: there is no account and no email on file.

Keeping mail

Mail waits on the server, locked, for the time you choose for each address. On the free plan that is at most 1 day.

The longer mail is kept, the more of your past mail someone could read if your secret phrase ever leaks. Keep it short unless you need it.

If you turn on “delete 5 minutes after I view it”, the server learns when you open a message. Kept mail is not backed up, so it is lost if the server is lost.

The web dashboard

It loads its code from the server every time you open it. A compromised server could serve altered code, so using the dashboard means trusting the server.

Your secret phrase stays in this tab until you close it. If you choose Save on this device, a copy stays in this browser, locked by a 6-digit PIN. The PIN keeps other people out of this browser. It can’t stop someone who copies the browser’s files, so keep your device safe.

The CLI

The command line tool runs code you installed, and keys never leave your computer. If you don’t want to trust the server with the dashboard, use the CLI.

Your secret phrase

It is the only copy of your keys. Anyone who has it can open your addresses, and if you lose it, nobody can bring them back.