Privacy Policy

What we collect

When you sign in with Google, we store the basic profile Firebase Auth gives us: your email address and display name. We do not see or store your Google password.

The mailbox address you claim, and every message routed to it, including the subject and the full body (HTML and plain text), are stored so you can read them in the product.

The one-free-mailbox-per-account limit is enforced by your signed-in account and a database constraint. We do not store a device identifier, your IP address, or your browser's user-agent — the user-agent is read only to tell bots from people in the aggregate counts below, and is not kept.

We count daily traffic by source (for example: arrived from Google, from a link, or typed directly) and by page. These counts are aggregate totals only and are not tied to your account or device.

If you buy Energy (paid usage), the payment gateway (SePay for bank transfer, Stripe or PayPal for card/PayPal) processes your payment details directly. We store the transaction amount, currency, and status, never your card number or bank credentials.

Who can read your mailbox

Only the signed-in account that owns a mailbox can read the messages in it through the product. Our own admin tools can see that a mailbox exists, its address, and its owner, but do not display message contents.

Any signed-in user can pay for an Owner Lookup on a mailbox address. It shows only a partly hidden form of the owner's sign-in email (for example ng•••@gmail.com) and the mailbox status, never the owner's name, other addresses, or messages.

How long we keep data

This is not yet decided. regmail.me does not currently run an automatic deletion schedule for stored messages or account data. We are stating this plainly rather than inventing a retention window we do not enforce, and we will update this page the moment a real retention policy ships.

Third parties

We use Firebase Auth (Google) for sign-in and Cloudflare for hosting, storage, and inbound email routing. If you top up Energy, SePay, Stripe, or PayPal process that specific payment. We do not sell your data to any third party.

Deleting your data

A mailbox address you claim stays permanently assigned to your account and cannot be closed, released, or reassigned. Deleting your account and stored messages is still manual: email us and we will remove them by hand.

What is not yet decided

regmail.me does not yet have a named legal entity or a stated governing jurisdiction for this policy. We are not inventing either here; this section will be filled in once that decision is made.