Privacy, in plain words.
How this website behaves, and where the desktop archive lives. This is a factual product overview; approved release terms are still being prepared.
Contact messages
When you submit this form, your name, email address, topic and message are sent to us and stored in Cloudflare D1 to handle your request. Cloudflare Turnstile processes verification and technical connection data to prevent spam. This is separate from your mail archive, which is not uploaded. Do not include private mail or passwords. You can request access or deletion through the form’s privacy topic.
Website and contact form
We do not use advertising trackers or analytics. This website stores your language preference in a cookie and your theme in browser storage. Cloudflare Turnstile runs on the contact page to prevent automated submissions. Hosting providers may process ordinary request logs.
The desktop archive
Mail passwords use macOS Keychain. On Windows, the local credential vault is encrypted with Windows DPAPI for your Windows account. Passwords are never stored in the mail archive. Archive files and the index are readable while the disk is unlocked. On macOS, create an encrypted disk image in Disk Utility, unlock it, then let BackMyMail verify and copy the archive there. Disk Utility can save its password in Keychain. FileVault or BitLocker protects the working disk; portable .tar.age backups use a separate passphrase.
Connections you choose
Purchases are handled by Polar (polar.sh), our merchant of record; card payments run on Stripe. This website does not take payments or collect card details. To activate and check a license, the app sends the license key and a random device label to our license server (hosted on Vercel), which checks the key with Polar and returns a signed confirmation. In the Mac App Store edition, Apple handles the purchase and the app checks it with Apple.
Error reports (Sentry)
While Settings › Privacy › Send error reports is on (it is on by default), the desktop app sends a report to Sentry when something goes wrong: the error and its stack trace, the app version and the operating system. Before a report leaves your computer, email addresses and file paths are removed; it never contains your mail, attachments, passwords or license key. There are no usage statistics, screenshots, session recordings or performance traces. Reports go out through the app's own network connection, are listed in Settings › Privacy › Network activity and expose your IP address to Sentry. Offline mode sends none. Sentry keeps reports for 90 days.
Publisher and contact
BackMyMail is published by Omnibus R&D, LLC. Write to support@backmymail.com with product questions and to security@backmymail.com to report a security issue. Final privacy terms and production licensing must be completed before public release; the repository records current release gates and third-party notices. Never send mail archives or credentials by email or in a public issue.
App updates
At startup, update checks contact the BackMyMail website. These requests expose your IP address to the service but do not send mail, account details, license keys or a device identifier. You can disable startup checks in Settings; manual checks remain available. Offline mode skips these checks.