Tailmailer Privacy Policy

Last updated: October 26, 2026

Tailmailer LLC ("Tailmailer," "we," "us") provides an email alias service: you create disposable addresses ending in @tailmailer.com, and mail sent to those addresses is forwarded to your real email address. This policy explains what we collect, why, and what control you have. It applies to the Tailmailer apps (iOS, macOS), the Safari extension, the web portal at account.tailmailer.com, and the tailmailer.com service itself.

The short version: we collect what the service needs to forward your mail and run your account — nothing more. We do not sell data, we do not show ads inside Tailmailer, and the content of your forwarded email is processed in transit but not stored. One thing to be upfront about: our public marketing pages at tailmailer.com use third-party advertising and analytics tags (Google Tag Manager and the Meta pixel) that do track visitors across sites. These run on the marketing pages only — never in the apps, never in the Safari extension, and never in the account portal where your aliases and mail live. Section 3 explains this in full, including how to turn it off.

1. Information we collect

Account information. Your real email address (the forwarding destination), a password (stored only as a salted bcrypt hash — we cannot read it), your plan, and account settings such as whether two-factor authentication is enabled. If you enable authenticator-based two-factor authentication, we store the shared secret needed to verify your codes. If you use email codes, we store only a hashed copy of each short-lived code.

Aliases. Each alias you create, the website it is associated with (if any), any notes you attach, and whether it is on or off.

Relay activity. When a message passes through the relay we log the sender's address, the message subject, the alias involved, the time, and the outcome (delivered, dropped, or error). We keep this log to provide alias activity history, troubleshoot delivery, and fight abuse. We do not store the body or attachments of forwarded email. Message content is processed in memory only for as long as it takes to forward it.

Sessions and devices. When you sign in we record the app used (for example "iOS App" or "Web Portal"), your device's user-agent string, your IP address, and sign-in/last-active timestamps. This powers the Devices page, where you can see and revoke access for each signed-in device.

Billing. Paid plans are processed by Stripe. We store your Stripe customer and subscription identifiers and subscription status. We never see or store your full card number.

Server logs. Our infrastructure keeps routine technical logs (IP addresses, request timestamps, error traces) for security and reliability.

2. What the apps and extensions do NOT collect

This section is about the Tailmailer apps, the Safari extension, and the account portal — the places you actually use the service. (For the marketing pages at tailmailer.com, see section 3.)

The Safari extension examines web pages locally on your device to find email fields. Page contents never leave your device. The only thing the extension transmits is the domain of the site you are on (for example example.com) — and only when you tap the button asking for an alias, so the alias can be tagged to that site. We do not collect browsing history, we do not use analytics SDKs or advertising SDKs, we do not fingerprint devices, and we do not use tracking as defined by Apple's App Tracking Transparency framework. There are no advertising or analytics tags of any kind in the apps, the extension, or the account portal at account.tailmailer.com.

3. Cookies and tracking on our marketing pages

Our public marketing pages — the homepage at tailmailer.com and the download page — load two third-party tags:

What these collect. When you load one of those pages, these tags may receive your IP address, your browser and device type, the page URL and referring URL, and a cookie identifier stored in your browser. The Meta pixel may also match you to an existing Facebook or Instagram account if you have one. This is cross-site tracking: Meta can combine what it learns here with what it knows about you from other sites that run its pixel, and from your activity on its own platforms. We do not send Meta your email address, your aliases, or any account data.

Where they do not run. Neither tag is present in the iOS or macOS apps, in the Safari extension, or in the account portal at account.tailmailer.com where your aliases and mail activity live. The Meta pixel runs only on the homepage and the download page — it is not on this privacy policy, our terms, or our account deletion page. The Google Tag Manager container currently loads on all of our public pages, including this one.

How to turn it off. Any of the following stops these tags from running or from being useful: use Tailmailer itself (the apps, extension, and portal carry no tags); block trackers with your browser's built-in protection or an extension such as uBlock Origin; send a Global Privacy Control signal, which we honor; or adjust your Meta ad settings at facebook.com/adpreferences. Blocking these tags does not affect your ability to sign up for or use Tailmailer in any way.

Being straight with you. We know that running an ad pixel sits awkwardly with selling a privacy product, so we would rather document it plainly than bury it. The tags exist so we can tell which ads bring people to Tailmailer. They touch marketing-page visitors only, and never the service itself or anything connected to your account.

4. How we use information

To create and forward your aliases; to authenticate you and secure your account (including two-factor codes and device sessions); to send service email such as verification links and sign-in codes; to enforce plan limits and prevent abuse (spam relaying, bulk signup); to process payments; and to comply with legal obligations. We do not use your account information — your email address, your aliases, or your relay activity — for advertising, and we do not sell or rent it to anyone. Marketing-page visit data collected by the tags in section 3 is used to measure and target our own advertising; it is never joined to your Tailmailer account.

5. Legal bases (EEA/UK users)

We process account and relay data because it is necessary to perform our contract with you. We process security logs, session records, and anti-abuse data under our legitimate interest in keeping the service secure. The advertising and analytics tags on our marketing pages (section 3) require your consent; where consent is required we ask for it and you may withdraw it at any time.

6. Who we share information with

We use a small number of service providers to run Tailmailer: DigitalOcean (servers and managed database, United States), Cloudflare (network and DNS security), Stripe (payments), and our own mail infrastructure for sending and receiving email. These providers process data only on our instructions. Beyond that, we disclose information only if required by law or valid legal process, to protect the rights and safety of users and the service, or as part of a merger or acquisition (in which case this policy continues to apply to your data). There are no data brokers.

Separately from the service itself, visitors to our marketing pages are seen by Google (Google Tag Manager) and Meta (the Meta pixel), as described in section 3. Unlike the providers above, Meta acts for its own advertising purposes as well as ours. These two receive marketing-page visit data only — they receive no account data, no aliases, and no mail.

7. Retention

Account, alias, and session data are kept while your account exists. Relay log entries and expired two-factor codes are periodically purged. Revoked sessions are unusable immediately. When you delete your account, your aliases, sessions, codes, and account record are deleted at once; relay log entries lose their link to any account. We retain one thing after deletion: a one-way cryptographic hash of your signup email address and the dates of your free trial, used solely to prevent repeated free trials — the hash cannot be reversed into your address. Routine backups age out on a fixed schedule. Some minimal records may be retained where the law requires (for example, payment records for tax purposes).

8. Deleting your account

You can permanently delete your account at any time, directly inside the iOS/macOS app (Account → Delete Account) or on the web portal. Deletion requires your password, takes effect immediately, and cannot be undone. All of your aliases stop receiving mail permanently.

9. Security

All connections to the service use TLS. Passwords and two-factor codes are stored only as bcrypt hashes. Access tokens are scoped to a revocable device session, and changing your password signs out all other devices. In the apps, credentials are stored in the operating system's secure keychain, and the Safari extension is designed so that your access token is never exposed to web page scripts. No system is perfectly secure; if we learn of a breach affecting your personal data we will notify you as required by law.

10. Your rights

Depending on where you live (including the EEA, UK, and California), you may have rights to access, correct, export, restrict, object to the processing of, or delete your personal data. Most of these you can exercise yourself in the app or portal (view and edit account data, delete the account). For anything else, contact us at the address below; we will respond within the time the law requires. We do not discriminate against you for exercising your rights. California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we honor the rights to know, delete, and correct.

11. International transfers

Our servers are in the United States. If you use Tailmailer from elsewhere, your data is processed in the US. For EEA/UK users we rely on appropriate safeguards, such as standard contractual clauses with our providers.

12. Children

Tailmailer is not directed at children and may not be used by anyone under 13 (or the higher minimum age in your jurisdiction, such as 16 in parts of the EEA). We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

13. Changes

We may update this policy as the service evolves. Material changes will be announced by email or in the apps before they take effect, and the date at the top always reflects the current version.

14. Contact

Tailmailer LLC Email: [email protected] Support: [email protected]