Privacy

Remail — self-hosted email infrastructure.

This is a self-hosted install of Remail running on remail.foo. The authors of Remail operate no service, receive no telemetry, and have no access to anything here. Data lives on the machine the operator of this install runs, and is handled under their policies.

Remail Mail apps

The Remail Mail apps for iPhone, iPad and Android, and the mail client at mail.remail.foo, connect only to the Remail server you sign in to. There is no analytics, no advertising, no tracking, no crash-reporting service and no third-party SDK that receives your data.

• Sent to your server: your email address and name, your password or sign-in code when you sign in, and the mail you read, write, send and organise. The server stores your mail so you can read it anywhere; that is its whole job. For accounts on remail.foo, that server is operated by JohnnyCode.ai, which uses this data only to provide your mailbox and never sells or shares it.
• Stored on your device: a session token in the system keychain or encrypted storage, and a cache of recent mail, drafts and unsent messages so the app works offline. Signing out deletes all of it.
• Notifications are generated on your device by the app checking your server for new mail; no push service sees your mail.
• Images in messages load from the sender's servers when you open a message, as in any mail client, which can tell a sender that the message was opened.
• All connections use HTTPS.

Mail is kept until you or the operator delete it. To delete your account and its mail, see Support.

What a DNS connection stores

When you connect Cloudflare or Vercel, this install keeps:

• the access token the provider issues, encrypted at rest with the install's own key and never returned by the API or shown in the interface;
• the refresh token, where the provider issues one, encrypted the same way;
• which account the authorization belongs to — for Vercel, the team id, because every API call has to be scoped to it;
• a record that the connection was made, in this install's audit log.

The token is used only to look up the zone for a domain you have added here, read that zone's records, and write the mail records that domain needs. Nothing else in your DNS account is read or changed, and nothing is sent anywhere else.

Removing it

Disconnecting from the Domains page deletes the stored tokens outright. Revoking the authorization at Cloudflare or Vercel has the same effect from their side. Either way this install can no longer reach your DNS account.