What we hold, and what we refuse to do with it.

Secuno LLC, 30 North Gould Street, Sheridan, Wyoming 82801, USA, is the operator of mailby.app and the controller of personal data described here. The company site is secuno.net. Privacy requests go to support@mailby.app with the subject “Privacy request”.

When you open a free inbox we create a server session and an address. We store the address, the time it expires, and the messages that arrive, including headers, body, and attachments, for the retention window. Message objects are encrypted at rest with AES-256-GCM. The recovery secret is stored as a hash, not as the secret itself.

The session cookie is what ties the browser to that inbox. We also keep a short-lived record of the IP address used to create or read the inbox, so we can rate-limit and investigate abuse. That is a security log, not a marketing profile. How long each class lasts is on data retention.

An account stores your email, a password hash if you set a password, and, if you use Google, the Google subject identifier and the verified email Google sends us. We do not receive your Google password. Google’s own policy covers the moment you are on Google’s screen.

If you pay, Stripe processes the card. We store Stripe customer and subscription identifiers, the plan, and the invoice state. We do not store the full card number or the card security code.

The contact form, abuse reports, and security reports store the address you type, the message, and the time, so we can reply and keep a record of the report. Do not put a full password or a full payment card in those forms. For abuse, do not paste an entire message body unless we ask for it.

Transactional mail we send you, such as a password reset, is about that request. It is not a promotional list. Promotional mail, if we ever send it, includes an unsubscribe link and the postal address above.

• We do not sell message content, and we do not rent inboxes.
• We do not use your mail to train models or to build an advertising profile.
• We do not publish a directory of live addresses, and we do not let the public open an inbox by typing the name.
• We do not claim that a temporary address hides you from the website you sign up on. That site sees the address you give it.

We process inbox content to perform the service you asked for. We process account and billing data to run the contract and to keep tax records. We process IP addresses and abuse reports as a legitimate interest in keeping a receive-only mail system from being used for fraud, and where the law requires us to keep or disclose a record.

If you are in the EEA, the UK, or Switzerland, you can object to processing based on legitimate interest, ask for access or correction, ask for deletion or restriction, and ask for a copy of account data. Message content that has already expired is gone. We respond within one month. You may also complain to your local authority. Those rights do not depend on living in Wyoming.

The cookies are there to run the product: a session cookie for the inbox or the account, a CSRF cookie for form posts, and a short-lived state cookie while Google sign-in is in progress. They are not advertising cookies. The browser will also store whatever a page you open inside a message tries to set, which is why the preview blocks remote images.

Stripe sees billing details when you pay. Google sees that you started sign-in when you choose that button. We use them as processors for those jobs. We do not sell personal data. We may disclose information if a valid legal process requires it, or if it is necessary to stop ongoing abuse, and we limit that to what the request actually needs.

Mail is stored on systems Secuno LLC operates for mailby.app. A transfer from your country to the United States happens when you use the site from outside the United States.

Mailby is not directed at children under 13, and we do not knowingly create an account for a child under 13. If you believe we have, write to support@mailby.app and we will delete the account data we can still identify.