Legal
Cookies
The complete list. There is no tracking cookie, no advertising pixel, and no third-party analytics script anywhere on this site, which is why there is no cookie banner: nothing here needs consent, because everything here is strictly functional.
| Name | Kind | What it does | Lifetime |
|---|---|---|---|
| __Host-tmailr_session | cookie | Keeps you signed in after you choose to sign in. Never set for guests. | up to 30 days |
| __Host-tmailr_idt | cookie | Lets sign-out end your session at the identity provider too. Only set after sign-in. | up to 30 days |
| tmailr_oidc | cookie | Protects the sign-in handshake against forgery. Deleted as soon as sign-in finishes. | minutes |
| tmailr:theme | localStorage | Remembers your light or dark choice. | until you clear it |
| tmailr:last-inbox | localStorage | Lets a refresh reopen the inbox you were just given instead of minting a new one. | until you clear it |
| tmailr_aliases | localStorage | The list of aliases created in this browser, so you can find them again. | until you clear it |
What that means in practice
- A guest who never signs in gets no cookies from us at all.
- Local storage stays on your device; we cannot read it from our side.
- Clearing site data signs you out and forgets your theme and your device-local lists. Aliases and inboxes themselves are unaffected: each still opens by its own link.
- Fonts and images load from our own domains (cdn.tmailr.com, cdn.bolrach.com), never from a third-party host that could log you.
Contact
Privacy questions go to dpo@tmailr.com. The wider picture of what we store and for how long is in the privacy policy.
Last updated 2 August 2026