Security and Hosting
You trust us with the addresses of people who trust you. Here is how we protect them.
What we do
How you sign in
You sign in with a six-digit code received by email: nothing to remember, nothing to reset, and the code proves every time that the mailbox is yours. The code is stored hashed, is valid for ten minutes, and closes after five attempts. The password you chose at signup is hashed with an algorithm designed to be slow — no one on our end can read it, including when helping you. If you sign in with Google, we store none.
What travels over the network
Everything goes over HTTPS, without exception: a plain-text visit is redirected, and the browser receives the instruction never to try otherwise, for one year. Emails go over TLS whenever the recipient server accepts it — which is the case for all major mail providers.
Workspace isolation
Every table carries its workspace identifier, and every query requires it. An automated test creates two real accounts, tries every cross-workspace access and verifies that each one sees only its own data. A second check reviews the code for any query that may have forgotten its filter.
Backups
The database is backed up every night, and fourteen days are kept. Each backup is verified immediately after being written: if it does not contain the subscriber table, the job fails rather than pretending it succeeded. The entire server is also backed up by the hosting provider.
Proof of consent
When someone subscribes through a form and confirms, the date of their confirmation and the address from which they gave it are recorded. They appear in your export: the day a subscriber disputes having consented, the proof is in your hands, not ours.
What a third party can see
The writing-assistant functions never read your contacts. When you ask the AI to write or review, it is the text of your message that goes to Anthropic, outside Europe, and nothing else. Card numbers are entered directly at Stripe and never pass through our servers.
Where your data lives
Two locations, both in the European Union. One thing leaves them, and only if you ask for it: the text you entrust to the writing assistant, which goes to Anthropic.
- Falkenstein, GermanyThe database and the site, on a server rented from Hetzner Online GmbH.
- Ireland, eu-west-1 regionEmail sending, through Amazon Web Services EMEA SARL.
The legal detail — retention periods, processors, your rights — is in our privacy policy. Service status can be read live on the status page.
Leaving requires no one's permission
None of what follows requires writing to us or waiting for a reply.
- 1 clickExport all your subscribers, with their statuses, tags, confirmation dates and the address from which they consented.
- 1 nameDelete a workspace. You retype its name, and its subscribers, campaigns, stats and domains are actually erased. An active paid subscription is canceled first.
- 1 addressDelete your account. You retype your email address, and your identity, connections and sessions go with it.
- 0 daysNo minimum term, no notice period.
Your data stays yours
Full export in one click, EU hosting, real deletion. No minimum term.