Privacy Policy

Wraith is run by [Company name], [Registered address]. We are the “controller” of the personal data described here. Questions or requests: hello@wraith.email.

• Mail sent to your addresses: the sender, subject, message and any attachments. We store it so you can read it, and nothing else.
• Without an account: a random cookie that links this browser to its address. We don't ask for your name or email.
• With an account: your name and email from the sign-in provider you choose, and your Pro status.
• Abuse prevention: a one-way hash of your IP address, used to stop people creating addresses in bulk. We don't store the IP itself.

Only to run Wraith: showing you your mail, keeping your account, taking payments, forwarding mail when you ask us to, and keeping the service safe. We don't read your mail, sell data, show ads or use advertising cookies. Our legal bases are performing our contract with you and our legitimate interest in preventing abuse.

We use a few trusted providers to run the service:

• Supabase: Database, file storage and sign-in. (Your account, inboxes and received mail)
• Stripe: Pro subscription payments. (Email, payment details and billing history)
• Resend: Forwarding mail, only if you turn it on (Pro). (The forwarded message and your email)
• Our hosting provider: Running the website and mail server. (Technical request data such as IP address)
• Apple, Google, Discord: Sign-in, only the one you choose. (Your name, email and account ID with that provider)

We may share data if the law requires it, for example a valid court order.

• Free addresses and their mail are deleted when they expire, 60 minutes after creation.
• Pro mail is deleted after 30 days, or sooner if you delete it or its inbox.
• The address itself stays reserved after deletion (without any mail) so it's never given to someone else.
• Account and billing records are kept while you have an account, and billing records as long as tax law requires.

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email hello@wraith.email. If you're in the UK you can also complain to the ICO; in the EU, to your local data protection authority.