Privacy Policy

Version 2 · Effective 4 November 2026 · The short version: your mail lives on our servers so we can deliver it, automated systems keep it safe, and that is all it is used for. No ads, no analytics, no selling data. There is nothing here to sell it to. The agreement side of this is in our Terms; what we are building towards is on Our Goals.

What we collect and store

• Your account: your name, your email address, a securely hashed password (we never store it in plain text), and your settings, plus your two-factor secret and recovery material if you turn those on, stored encrypted.
• Your content: your messages and attachments, contacts, calendar events, tasks, notes, signatures, filters and folders, the things the service exists to hold for you.
• Security records: sign-in attempts, session records and an audit log of account activity (for example sends, deliveries and settings changes). These exist to stop abuse and to let you review your own account’s history.
• Delivery & protection records: bounce records, spam and abuse scores, and link-safety results produced automatically when mail is sent or received.
• Connection data: the IP address a request arrives from, used for rate limiting and abuse prevention, not for location tracking or advertising.
• Domain data: if you link a domain, the domain, its settings, and the DNS records we generate or check for you.
• What you send us: if you write to us, we keep that correspondence so we can answer and act on it.

How your mail is protected on our servers

• Encrypted at rest: message bodies and attachments are encrypted on our servers with a key unique to your account; secrets such as two-factor keys are encrypted too. Subjects and routing metadata stay readable to the system so search, folders and delivery can work, we say this plainly rather than pretend otherwise.
• Encrypted backups: daily backups are encrypted before they are stored, on a rolling basis.
• Encrypted in transit: the web app is HTTPS-only, mail is sent and received over TLS wherever the other server supports it, and our published MTA-STS policy requires TLS from senders that honour it.
• Where it lives: Freemail mail is stored on production servers we operate in Europe. Letting you choose your data’s home region is one of our goals. We will only claim it when it is real.

Cookies and tracking

There are no advertising or analytics cookies and no third-party trackers, in the app or on this website. The app uses only the essential storage it needs to keep you signed in and remember your settings on your own device.

What automated systems do with mail

Incoming and outgoing mail is processed automatically: spam scoring, authentication checks (SPF, DKIM, DMARC), link-safety analysis, and bounce and abuse detection. This is machine processing to deliver and protect mail. No human reads your messages, and message content is never used for advertising or profiling.

What we never do

• No advertising, and no ad networks.
• No third-party analytics or trackers, in the app, and on this website.
• No selling, renting or sharing your data with marketers. Ever.
• No reading your mail to build a profile of you.

Who else sees data

Email only works by talking to other mail servers: when you send to an outside address, that message goes to the recipient’s provider, as with any email service. Beyond that necessary delivery, your data stays on infrastructure we operate. If the law ever compels disclosure, we would have to comply, that has not happened to date.

How long things are kept

• Mail you delete is gone for good once you empty it; messages in Trash and Spam are automatically purged after a short retention window (7 days by default).
• Security and audit records are kept for a limited period (90 days by default) and then deleted.
• Backups of the whole service are kept on a rolling basis so we can recover from failures; a deleted message may persist in a backup until that backup rotates out.

Your choices

• Everything in your account is visible to you in the app; your security history is under Account → Security.
• You can change your password, manage sessions and devices, and turn two-factor on or off at any time.
• For anything else about your data (a copy, a correction, deletion), write to us at the address below and we’ll handle it.

Changes

If this policy changes in a way that matters, we’ll announce it in the app and update the version on this page.

Contact

Privacy questions and abuse reports: abuse@freemail.ng.