Privacy Policy

We forward email. We don't read it, scan it, sell it, or train AI on it. We collect the minimum needed to operate the service and nothing else.

• Account data. Your real email address and an authentication token, used to sign you in and forward mail to you.
• Aliases. The alias addresses you create, the labels you give them, and whether each is enabled or disabled.
• Forwarding metadata. Sender, recipient alias, subject, timestamp, and size for each forwarded message — used to deliver mail and show you activity in your dashboard.
• Basic usage logs. IP address and request metadata for security and abuse prevention. Retained for a short window, then discarded.

• The body content of your forwarded emails — beyond what's needed to forward the message in transit.
• Trackers, ad pixels, third-party analytics that profile you across the web.
• Anything we'd sell to advertisers, data brokers, or AI training datasets.

We use the data we collect to deliver mail, show you which aliases are receiving spam, secure your account, and prevent abuse. That's it.

We use a small number of vetted infrastructure providers to operate the service (hosting, database, email delivery). They process data on our behalf under contracts that prohibit independent use. We do not sell your personal information.

You can export, correct, or delete your data at any time from your account settings. If you delete your account, we remove your data within 30 days, except where retention is required by law. EU/UK and California users have additional rights under GDPR and CCPA — contact us to exercise them.

Data is encrypted in transit and at rest. We follow the principle of least privilege internally and do not access individual accounts except when required for support or to investigate abuse — and only with your permission or as legally required.

If we make material changes to this policy, we'll notify you by email before they take effect.

Questions? Email privacy@dontspamme.app.