Last updated: 29 April 2026
The mailflow.sh website does not use analytics or tracking cookies. If you purchase a commercial license, Paddle (our payment processor) collects your payment details, and we receive your name and email address to fulfil the order. The MailFlow software itself is self-hosted — we never have access to your email data.
On the website (mailflow.sh): We do not use analytics, advertising trackers, or third-party cookies. Standard web server logs (IP address, page requested, timestamp) may be retained for up to 30 days for security purposes.
On purchase: When you buy a commercial license, Paddle processes your payment. We receive from Paddle:
We do not receive or store your card number, bank details, or full billing address — Paddle handles all of that.
We do not sell, share, or rent your personal information to third parties. We do not send marketing emails.
MailFlow is self-hosted software that runs entirely on your own server. We have no access to your email accounts, messages, passwords, or any data stored in your MailFlow instance. You are the data controller for your own deployment.
Payments are processed by Paddle, who acts as Merchant of Record. Paddle's own Privacy Policy governs the data they collect during checkout.
Purchase records (name, email, transaction ID) are retained for as long as reasonably necessary to support your license and comply with legal obligations. You may request deletion by contacting us — we will remove your data unless retention is required by law.
You may request access to, correction of, or deletion of personal data we hold about you at any time by emailing matthias@mailflow.sh. We will respond within 30 days.
We may update this policy from time to time. Changes will be posted on this page with an updated date.
Privacy questions? Email matthias@mailflow.sh.