Angerona Mail

Privacy

What we keep, what we never do with it, and who can see it.

What we store

Messages
Every message an inbox sends or receives is stored for the account that owns the inbox, and for nobody else, until that account deletes it. There is no retention clock on our side; what you keep, we keep, and what you delete is gone.
Delivery records
For every message that leaves or arrives we record the addresses involved, the times, and the outcome: accepted, deferred, bounced, complained about. These are the records needed to run a mail service, to show an account what happened to its mail, and to answer a complaint from a receiving side.
Account records
Who holds the account, the people who can open it, the keys it was issued, the domains it verified, and the sending class each inbox was admitted to. The consent proof a sending class requires is stored with the account that supplied it.

What we do not do

  • We do not sell data, or rent it, or trade it.
  • We do not profile the people who write to an inbox or receive mail from one.
  • We do not read mail to build anything: no advertising audiences, no recommendations, no models. Automated checks for spam and malware run on mail as it passes, and nothing is kept from them beyond the score.
  • We do not train anything on message content, ours or anyone else's.

Who can see content

Nobody outside the account. The people who run the service can reach message content only to fix a fault or to answer an abuse report, and only as far as that needs. We do not share message content with anyone unless a law we are bound by compels it, and then only as much as it compels, and we say so to the account where we are allowed to.

The contact form

What you type into the contact form is used only to answer you. Your name and address are kept with the message so that a person can write back; they are not added to any list. The form itself never sends anything to the address you give. If a reply is needed, a person writes it.

Cookies

This site sets no cookies of its own and runs no analytics. The one exception is the anti-bot check on the contact page, which may set what it needs to tell a person from a script; it is loaded on that page only.

Asking a privacy question

Questions about what we hold, a request to see it, or a request to delete it go through the contact page. A person reads every message and answers.