Privacy

offmail.app is built to need as little of your data as possible. This page explains what we process and why.

Inboxes are public

Every inbox can be read by anyone who knows or guesses its name. Do not send or receive anything sensitive through this service. We do not know who opens an inbox and we cannot restrict access to it.

What we store

• Messages delivered to offmail.app addresses, including headers, body and attachment metadata. They are deleted after 7 days, when an inbox exceeds 200 messages, or when someone deletes them.
• Server logs containing request metadata (IP address, route, timestamp, sender domain, inbox name, message size). Logs never contain message bodies and are kept for 30 days for abuse prevention and debugging.
• Browser storage: the list of inboxes you opened recently and your sound preference are kept in your browser only, never sent to us.

What we do not do

• No accounts, no tracking cookies, no advertising profiles.
• We do not sell or share message content with third parties.
• Remote images in messages are blocked until you choose to load them, so senders cannot track opens by default.

Third parties

The website is served through a content delivery network for protection against attacks. That provider processes request metadata under its own privacy policy.

Your rights

If you believe a message in an inbox concerns you and should be removed, use the abuse page. Because inboxes are anonymous we cannot verify ownership, but we will remove content on a reasonable request.