Privacy Policy

Last updated: 12 January 2026

The short version

We don't read your email. We don't sell your data. We don't show you ads. We collect the absolute minimum needed to run the service and nothing more.

What we collect

  • Your email address and password (hashed with bcrypt, we cannot see your password)
  • The content of your mailbox (stored encrypted at rest on our servers)
  • Basic server logs (IP address, timestamps) retained for 14 days for abuse prevention
  • Account metadata: creation date, storage usage, last login timestamp

What we don't collect

  • Analytics or tracking cookies - we use none
  • Behavioural data, browsing history, or usage patterns
  • Third-party tracking pixels or scripts
  • Your contacts, calendar, or any data beyond your mailbox

How we use your data

Exclusively to provide the email service. We deliver your mail, store it, and let you access it. That's it. We don't analyse email content, build advertising profiles, or share data with third parties.

Data storage and security

All data is stored on servers in London, United Kingdom. Email content is encrypted at rest using AES-256. All connections to our servers use TLS 1.2 or later. We perform daily encrypted backups retained for 7 days.

Data retention

Your email is stored for as long as your account is active. If you delete your account, all data is permanently erased within 30 days. Server logs are automatically purged after 14 days.

Your rights (UK GDPR)

You have the right to access, export, correct, or delete your personal data at any time. You can export your entire mailbox via IMAP. To delete your account, email privacy@cubbypost.com and we'll process it within 48 hours.

Third parties

We do not share, sell, or provide your data to any third party. We don't use third-party analytics, CDNs that log requests, or external authentication providers. The only external service is our hosting provider, which processes data under a DPA compliant with UK GDPR.

Changes to this policy

If we make material changes, we'll email all registered users at least 30 days in advance. Minor clarifications may be made without notice but will be reflected in the "last updated" date above.

Contact

Questions about this policy? Email privacy@cubbypost.com.