This Policy explains how StopMail processes personal information when providing stopmail.cc and its email subscription management service. StopMail is responsible for the processing described here. Send privacy questions, requests and complaints to [email protected]. We process data necessary for the functions you choose. We do not sell mailbox data or use it for targeted advertising or training general-purpose AI models.
1 Scope and sources
This Policy applies to website visitors, account holders, users who connect mailboxes and people who contact us. Sources include information you provide, mailbox providers you authorize, necessary records generated by the service and payment-status information from a completed purchase. Third-party mailbox providers and sender websites you visit process information independently under their own policies.
This Policy is a notice of our practices. Use of the service is not blanket consent to every processing activity. We provide separate choices where consent is required.
2 Account and connection information
Account information includes your name, account email, preferences, a secure password hash, and credentials needed for sessions and password resets. We do not store your StopMail account password in plain text.
Connection information includes the mailbox provider, mailbox address or account identifier, connection status, authorization scope, and encrypted OAuth access and refresh tokens. Tokens enable authorized mailbox functions and are excluded from account exports. We do not request or store your mailbox-provider password.
3 Mailbox data and action records
After you initiate a sync, we obtain the minimum metadata and headers needed for subscription discovery, such as sender names and addresses, received times, subscription classification signals, List-Unsubscribe, List-Unsubscribe-Post and opaque provider message IDs. Scan windows and available fields depend on the provider. For example, Gmail discovery normally covers the most recent year.
We store sender information, statuses, counts, received times, opaque message IDs, pagination cursors, sync and action records, plan usage and necessary security audit records to support the list and subsequent actions. We do not store email bodies, attachments or contacts, and we do not retain full personalized unsubscribe URLs on a long-term basis.
You initiate synchronization. We do not conduct continuous mailbox scans that you have not triggered. Refreshing a connection token or completing a task you already initiated does not authorize us to start a new mailbox scan on our own.
For an unsubscribe action, we use the necessary unsubscribe URL and parameters to submit a request to the sender’s endpoint. This can include a recipient identifier or personalized token. That endpoint may receive request timing and network information about the request source. For deletion, we send the provider the target message IDs and a move-to-trash instruction. Keep changes only a status within StopMail.
4 Access records and information you submit
To maintain sessions, prevent abuse, diagnose faults and secure the service, we may process necessary IP addresses, request times, browser or device types, error statuses and action logs. We exclude from logs email bodies, full unsubscribe URLs, plain-text tokens and raw sensitive provider errors. We do not collect precise location for the service described in this Policy.
When you submit feedback or contact support, we process the content and contact information you provide. Use redacted descriptions where possible. An optional feedback contact email is stored encrypted. Do not provide mailbox passwords or OAuth tokens.
The local Email Checker does not require a mailbox connection and is designed to analyze the single email or headers you enter within your browser without automatically opening unknown links. If you separately send checker content to support, we receive and process that submission. Ordinary website use still creates necessary session and security records.
5 Payment information
When you purchase a paid service, a third-party payment provider processes the information needed to complete the payment under its own privacy policy. We do not store full payment credentials.
We process order identifiers, purchase email, subscription status, renewal timing, refund and dispute information to provide entitlements, reconcile billing, prevent fraud and meet financial obligations. Do not send sensitive payment credentials to support.
6 Purposes and legal bases
Contractual service: creating and managing accounts, connecting authorized mailboxes, running syncs and actions, managing subscriptions and handling support requests. Where European data protection law applies, the basis is performance of our contract with you or steps requested before entering a contract.
Security and operation: validating requests, preventing fraud and abuse, diagnosing faults, maintaining the service and resolving disputes. Where permitted, we rely on legitimate interests in operating a secure and reliable service, after considering your rights and reasonable expectations. We use another appropriate basis when required.
Legal duties: retaining required financial records, responding to lawful requests and fulfilling data rights. Optional cookies or marketing communications that require consent are used only with appropriate consent, which can be withdrawn. OAuth authorization is a technical grant of mailbox access and does not replace the need for a lawful basis for each processing purpose.
We do not use mailbox data to sell advertising, conduct cross-site behavioral advertising, determine credit or employment eligibility, or train general-purpose AI models. The service described here is not intended to make solely automated decisions with legal or similarly significant effects.
7 Recipients and disclosures
Mailbox providers: for authentication, sync, authorization refresh and message moves. Sender unsubscribe endpoints: for parameters necessary to carry out your instructions. Infrastructure and support providers: only as needed for hosting, databases, service communications, security and support, subject to confidentiality and appropriate data protection obligations.
Legal and safety disclosures: only as required or permitted by applicable law, and only as necessary to comply with valid legal process, protect safety, prevent fraud or defend lawful rights. We assess the validity and scope of requests and notify you where lawful and appropriate.
Business transactions: a merger, acquisition or asset transfer may require a necessary transfer of relevant information, subject to continuing safeguards. We will provide legally required notice and obtain consent where required if the responsible party or purposes materially change. We do not sell personal information or share mailbox data for cross-context behavioral advertising.
Authorized personnel may access data only as necessary for their duties. Human access to Google user data is subject to the stricter limits in the next section. You may ask [email protected] about provider identities, actual processing locations and applicable transfer arrangements. We will provide supplementary information that must be made public under applicable law.
8 Limited Use of Google user data
StopMail’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Official policy: https://developers.google.com/terms/api-services-user-data-policy.
We use Google user data only to provide or improve visible email subscription management features. We transfer it only when necessary to provide those features, comply with applicable law, address security issues, or complete a business transaction permitted by the policy. We do not sell the data, use it for advertising or general-purpose model training, or transfer it to data brokers.
We do not allow humans to read Google user data unless you expressly agree to access to specific data, for example to resolve a support issue; access is necessary for security; access is required by applicable law; or use is limited to aggregated, anonymized data for internal operations as permitted by Google’s policy. A general service-improvement purpose does not expand these exceptions.
We use cookies necessary for login, sessions and security. Blocking necessary cookies may prevent sign-in. These cookies are not used for advertising tracking. If we introduce analytics or marketing cookies that require consent, we will explain them and offer the required choice before enabling them. This Policy does not constitute advance consent.
Necessary service notices, such as security, action or billing messages, are separate from marketing. Where consent is required for marketing emails, we obtain it first. You may withdraw through the email’s unsubscribe method or [email protected]. Opting out of marketing does not stop necessary security or transactional notices.
10 Retention and deletion
We retain personal information only as long as needed for the stated purpose, service delivery or lawful obligations. We assess retention using sensitivity, account and connection status, task requirements, legal financial-record periods and dispute needs. Technical ability to retain data is not a reason for indefinite retention.
On mailbox disconnection, we delete OAuth tokens immediately and delete the remaining associated connection data promptly and in any event within 30 days. Access and security logs are retained for 90 days. Backups are overwritten within a rotation cycle of no more than 35 days. Order, tax and financial records are retained for as long as required by law, up to 7 years.
On mailbox disconnection, we also attempt provider revocation. On account deletion, we delete local account data and sessions, stop future access and attempt to revoke all connections. We cannot guarantee reversal of actions already performed by third parties. Check permissions in provider settings where appropriate.
Records retained under the periods above remain subject to restricted use and access. Residual backups are not used for routine service delivery. If restored for recovery, deletion requirements continue to apply. Audit records that no longer identify a person may be retained. We do not promise immediate erasure from every backup.
11 Security and international processing
We use measures proportionate to risk, including token encryption, account password hashing, transport protection, access restrictions and security validation to protect necessary account and connection data. No internet service can guarantee absolute security. We will provide notice of a data incident when required by applicable law.
Our primary hosting region is the United States. A list of our main service providers is available on request at [email protected].
Processing by us and our providers may take place outside your location. Where transfer safeguards are required, we will use appropriate lawful mechanisms, such as an applicable adequacy decision, standard contractual clauses and necessary supplementary measures, and provide legally required information. Using the service does not waive transfer protections. We do not claim certification under a specific privacy framework on this basis.
12 Your rights and contact
Depending on applicable law, you may have rights to information, access, correction, deletion, a copy, portability, restriction, objection and withdrawal of consent. You may complain to a competent data protection authority where you live. Where local law applies, an authorized agent may submit a request and you may appeal a rights decision. We do not discriminate against you for lawfully exercising your rights.
Use the available export, disconnect and deletion controls in settings or contact [email protected]. Exports contain account information, preferences and connected-mailbox metadata, not provider tokens, email bodies or attachments. We may reasonably verify your identity but will not require a purchase to exercise rights. We will respond within applicable statutory deadlines and explain any lawful reason for not fulfilling a request.
Withdrawal of consent or OAuth authorization does not affect the lawfulness of earlier processing. Functions dependent on that permission may stop working. Subscription cancellation and data deletion are different requests, and we will help make the handling of both clear.
The service is not directed to children below the legal contracting age where they live. Contact us if an ineligible child has provided personal information, and we will take appropriate steps.
We will publish updates and effective dates and provide legally required notice of material changes. Operator: StopMail (trade name). The contracting entity and its registered address are shown on your order confirmation and invoice, and are available on request at [email protected]. Website: https://stopmail.cc. Sole contact email: [email protected].