tmailrCookie Policy
Last updated 3 August 2026
There is no tracking cookie, no advertising pixel, and no third-party analytics script anywhere on this site. This is the complete list of what we do set, and what each thing is for.
The complete list
| Name | Kind | Category | What it does | Lifetime |
|---|---|---|---|---|
| __Host-tmailr_session | Cookie | Strictly necessary | Keeps you signed in after you choose to sign in. Never set for guests. | up to 30 days |
| __Host-tmailr_idt | Cookie | Strictly necessary | Lets sign-out end your session at the identity provider too. Only set after sign-in. | up to 30 days |
| tmailr_oidc | Cookie | Strictly necessary | Protects the sign-in handshake against forgery. Deleted as soon as sign-in finishes. | minutes |
| tmailr:theme | localStorage | Functional | Remembers your light or dark choice. | until you clear it |
| tmailr:last-inbox | localStorage | Functional | Lets a refresh reopen the inbox you were just given instead of minting a new one. | until you clear it |
| tmailr_aliases | localStorage | Functional | The list of aliases created in this browser, so you can find them again. | until you clear it |
The categories
Under the EU/UK ePrivacy rules cookies fall into categories by purpose. We use only two of them:
- Strictly necessary — the session cookies that make signing in work. Without these the account simply cannot function, so they are exempt from consent.
- Functional — small preferences kept in your browser's local storage (your theme, the last inbox on this device). They never leave your device and we cannot read them from our side.
We use no analytics and no advertising cookies. If that ever changes, this page changes first and a consent choice appears before any such cookie is set.
Why there is no banner
A consent banner exists to ask permission for the tracking and advertising cookies a site wants to set. We set none, so there is nothing to ask about: everything here is either strictly necessary or a preference you set yourself. A guest who never signs in gets no cookies from us at all.
How to control them
Clearing site data in your browser signs you out and forgets your theme and your device-local lists. The aliases and inboxes themselves are unaffected: each still opens by its own link. Fonts and images load only from our own domains, never from a third-party host that could log you.
Children
Because we set no analytics or advertising cookies at all, no visitor is tracked, and a younger visitor is treated exactly the same as any other: strictly-necessary and functional storage only, nothing that profiles them.
Contact
Privacy questions go to dpo@tmailr.com. The wider picture of what we store and for how long is in the privacy policy.