Cookie Policy

We use a small number of strictly necessary cookies to keep you signed in and to protect the sign-in form. Those cannot be turned off, because the Service does not work without them.

We also use analytics and advertising technologies. In the UK, the EEA and Switzerland these are switched off until you accept them. Everywhere else they are on by default, and you can turn them off. If your browser sends a Global Privacy Control signal, we honour it automatically and you do not need to do anything.

These are set by us, are required for the Service to function, and are not used for advertising or analytics.

• Authentication and session — keeps you signed in and links your browser to your account. Session cookies, marked HttpOnly and Secure.
• Cross-site request forgery protection — a token that proves a form submission came from our own pages.
• Cloudflare Turnstile — protects the sign-up and sign-in forms from automated abuse.
• Your consent choice — remembers whether you accepted or declined, so we do not ask on every page. Stored in your browser only.

These are not necessary for the Service and are subject to the consent rules in section 4.

• Google Analytics 4 — how people find and move through the site. Aggregate reporting; we do not use it to identify individuals.
• Google Ads — measures whether an advert led to a sign-up, so we can tell which advertising is worth paying for.
• Meta (Facebook) pixel — the same measurement for advertising on Meta platforms.
• JustAnalytics — our own first-party analytics and error monitoring. Stores a visitor identifier in your browser so repeat visits are not counted as new people. It does not track you across other websites.

Google and Meta are separate companies and set their own cookies under their own policies. Turning them off here stops us sending them anything from this site.

UK, EEA and Switzerland. Analytics and advertising storage is denied before anything loads. You are shown a banner, and nothing non-essential is stored unless you accept. Declining is a real decline — the tags stay in a restricted mode that stores nothing on your device.

Everywhere else. Analytics and advertising are on by default. You can decline at any time using the link in section 6, and we stop.

Global Privacy Control. If your browser or an extension sends a GPC signal, we treat it as an opt-out everywhere in the world, not only where the law requires it. GPC overrides an earlier acceptance, and we do not show you a banner asking you to reconsider.

• We do not sell your personal information.
• We do not use the contents of your email for advertising, analytics or profiling. Message content is never sent to any third-party analytics or advertising provider.
• We do not load analytics or advertising technologies inside the signed-in mail interface for the purpose of reading your mail.

You can change your mind at any time. Clearing this site’s data in your browser resets your stored choice, and you will be asked again if you are in a region where we ask.

Your browser also lets you block or delete cookies for this site entirely. Blocking strictly necessary cookies will prevent you from signing in.

For the wider picture — what personal data we hold, why, for how long, and your rights over it — see our Privacy Policy. For the companies that process data on our behalf, see Sub-processors.

If we add or remove a third-party technology we will update this page and its review date. Questions go to privacy@justemails.app.