Privacy

Sealed envelopes. Messages and file chunks are encrypted on your device and addressed to the member devices of your bridge. The relay that moves them cannot open them.

Account basics — your email address and login state. Device records — public identity, a name you chose, platform and version. Bridge membership, and encrypted mailboxes holding sealed envelopes until they are delivered.

Operating metadata — quotas and delivery acknowledgements — is stored without message content, because the service never has message content to store.

It cannot read your messages or files, and it cannot recover them for you. If every device holding a bridge’s keys is gone, the ciphertext stays sealed — the server never re-creates keys and never reaches into anyone’s device. We prefer that trade and say it out loud.

These pages set no cookies, run no scripts and load nothing from third parties. The only requests your browser makes are for the pages themselves.

This page describes the current product behaviour. It does not claim that the service can recover bridge content or decrypt a lost device.