Privacy Policy

Last updated: September 13, 2026

Magn@tar Mail ("we," "us," or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and what rights you have.

1. Information We Collect

When you sign up for Magn@tar Mail, we collect:

Your name and email address
Your chosen Magn@tar Mail address and password (stored as a secure hash)
Payment information (processed by Stripe — we never see or store your card details)
Your filter preferences (allowlist, blocklist, keywords, labels, geographic settings)
Your custom domain name, if you connect one

We do not collect browsing data, location data, or any information beyond what is necessary to provide the service.

2. How We Use Your Information

We use your information solely to:

Provide and operate your email mailbox
Apply your spam filter preferences
Process your subscription payment
Contact you about your account when necessary
Improve the filtering system (aggregate, anonymized patterns only)

3. Your Email is Private

We do not read, scan, or analyze the content of your emails for advertising purposes. Your email is never sold, shared with third parties, or used for any purpose other than delivering it to your inbox. Our business model is simple: you pay us a flat monthly fee. That's it.

4. Importing Mail From Another Provider

If you choose to import mail from another account, you give us the address and an app password for that account so we can connect to it and copy your messages across.

Those credentials are never written to our database. They are held only for the duration of your session, written to a protected file while the import runs, and deleted the moment it finishes. We recommend revoking the app password with your old provider once your import is complete.

We read from your old mailbox; we never change or delete anything in it.

5. Data Storage and Security

Your email is stored on servers located in Ashburn, Virginia, USA, operated by Hetzner Online GmbH. All connections are encrypted using TLS. Your password is stored as a one-way cryptographic hash and cannot be recovered — only reset.

We implement industry-standard security practices including DKIM email signing, SPF and DMARC authentication, and encrypted connections for all mail protocols (IMAP, SMTP, HTTPS).

6. Data Retention

Your email and account data is retained for as long as your account is active. When your account closes, your mail remains readable for 30 days so that you can download a copy, and is then permanently deleted along with your personal data. You can download your entire mailbox at any time from your account settings.

We keep encrypted offsite backups of the service so that we can recover from hardware failure or accidental loss. Deleted mail can persist in those backups for up to six months before ageing out. Anonymized, aggregate filtering statistics may be retained indefinitely to improve the service.

7. Third-Party Services

We use the following third-party services:

Stripe — payment processing. Stripe's privacy policy applies to payment data.
Hetzner Online — server infrastructure. Hetzner is GDPR-compliant.
Backblaze — encrypted offsite backups of the service.

We do not use advertising networks, analytics trackers, or social media integrations.

8. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate information
Request deletion of your account and data
Export your emails before cancellation

To exercise any of these rights, contact us at support@magnatarmail.com.

9. Changes to This Policy

We may update this policy from time to time. We will notify active customers of material changes via email. Continued use of the service after notification constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Email us at support@magnatarmail.com.