Mailx is developed and operated by the team behind IVPN. All services we offer to customers are built for privacy. Internally, we know what exactly that means. If a choice needs to be made between one practice that deepens a user’s privacy, and another that would diminish it but accelerate our growth, we’ll always take the slower, more private option.

We are committed to being transparent about how we collect, use, and protect your data after you sign up to the Mailx service. Below we offer a concise and human-readable summary of our policies.

What data don’t you log?
Our goal is minimal data collection. We don't log any customer related information unless it is absolutely required for the operation of the email forwarding service. As such, we don't log:

information about non-authenticated website visits
we don’t log customer IP addresses
we don’t log bandwidth usage
Do you use cookies or third-party services?
We use cookies solely for the purpose of managing authenticated sessions.

For monitoring aggregate website usage we run our own Umami analytics instance. Umami is a privacy-focused, cookieless solution that tracks page views and user interactions without collecting personally identifiable information. All data remains on our self-hosted infrastructure.

What information do you store about my account?
For users signing up with passkeys, we store the registered email address in our database.

For users signing up with credentials, we store registered email address and a password hashed with Argon2 hashing algorithm.

Further, we store additional email addresses optionally added as ‘Recipient’ for forwarded emails.

We keep a record of the number of relayed or blocked emails for 90 days from the date and time the corresponding event occurred, used to provide relevant statistics to our customers.

How do you process and what information you store about forwarded emails?
Emails are processed through a self-hosted Postfix server.

Delivered emails are immediately removed from the Postfix queues. Undelivered emails are stored in a deferred queue. After 5 days, Postfix stops attempting delivery and discards the emails from the deferred queue.

The Postfix server is configured with the "info" log level, which means it records general information about email activity (such as when messages are sent or received). These logs are kept for 7 days to support system maintenance and troubleshooting.

I’ve signed up to the service through my IVPN subscription. Can you associate my Mailx account with my IVPN Account ID?
When your sign up through the IVPN service, a temporary Mailx signup link is generated in the IVPN database. Once the Mailx signup is completed, the link and corresponding identifiers are removed from the IVPN database to prevent any association between Mailx and IVPN accounts.

What information is retained when I stop using your service?
When a Mailx account is terminated due to subscription ending, non-payment or for any other reason, all settings and data associated with that Mailx account including the account itself is automatically deleted after 180 days. If you want to cancel your account and delete your data immediately, simply click on the ‘Delete account’ button in the Account settings.

Are there any ways to verify your claims regarding privacy?
The entire project is open source with repositories available on GitHub for customers to verify our privacy practices.

User Rights
Reasonable requests for release of a specific user’s data will be honoured within 28 days of an acceptable request from a user or person with a provable legal relationship with that user.

We reserve the right to refuse or charge for requests that are manifestly unfounded or excessive. Any refused subject access requests will be responded to without undue delay including the refusal reason as well as recourse to refer to the supervisory authority.

Changes to policy
Privatus GmbH, operator of Mailx reserves the right to change this privacy policy at any time. In such cases, we will take every reasonable step to ensure that these changes are brought to your attention by posting all changes prominently on the Mailx website for a reasonable period of time, before the new policy becomes effective as well as emailing our existing customers.

If you have any questions or concerns about our privacy practices, contact us at mailx@ivpn.net.