Privacy Policy

Effective 3 November 2026

Postal Systems collects no personal data through Inbox Classic or this website. There are no accounts, no analytics, no cookies and no telemetry. Your mail and your passwords stay on your computer and with your own mail provider.

Who we are

Inbox Classic is made by Postal Systems OÜ (registry code 14971894), Narva mnt 5, 10117 Tallinn, Estonia. Questions about this policy: info@postalsys.com.

This website

inboxclassic.com is a static website. It sets no cookies and loads no analytics, advertising, fonts or scripts from anyone. It is hosted on GitHub Pages, and the installer is downloaded from GitHub. As the host, GitHub, Inc. processes technical data such as your IP address to deliver and protect the site, as described in the GitHub Privacy Statement. Postal Systems receives no data about your visit.

The Inbox Classic app

Inbox Classic runs on your computer and never contacts Postal Systems. It has no telemetry, crash reporting or update checks that send data to us.

• Your account settings and a copy of your mail, for reading offline, are kept in a file on your computer (%LOCALAPPDATA%\InboxClassic).
• Your passwords and sign-in tokens are kept in the Windows Credential Manager, encrypted for your Windows account.
• Removing an account in Inbox Classic removes its mail copy and its password from your computer. Uninstalling Inbox Classic offers to remove the accounts and mail it kept; passwords of accounts still set up then stay in the Credential Manager (under Inbox Classic), where you can remove them. Your mail on your mail server is never removed.

Who the app talks to

Inbox Classic connects only to the services needed for the things you ask it to do:

• Your mail servers, over encrypted connections, to read, send and organize your mail.
• When you add an account, to find its server settings: DNS lookups over HTTPS through Cloudflare (with Google Public DNS as a fallback) and Mozilla's Thunderbird settings database receive the domain name of your address, for example example.com; your mail provider's own settings service may receive your address; and for an Exchange account, your organization's Autodiscover service may receive your address and password, as other mail programs send them.
• When you sign in with Microsoft or Google (or with a sign-in app you added), you sign in on the provider's own page. The provider gives Inbox Classic your name, your e-mail address and tokens that let it read and send your mail over IMAP and SMTP. Inbox Classic uses them only to work with your own mailbox, keeps them only on your computer and shares them with nobody. You can withdraw this access at any time in your Microsoft or Google account settings.
• Pictures from the internet in a message are loaded from the sender's servers only when you choose to see them. Links in messages open in your web browser.
• Unsubscribing from a mailing list: when you click Unsubscribe and agree, Inbox Classic sends the list's own unsubscribe address the request the message asks for (this tells the list your address wants out), writes the message the list wants for you to send, or opens the list's page in your browser.
• Brand logos: when your mail provider has checked that a message really comes from a brand and approved its logo (BIMI), Inbox Classic may fetch that logo from the brand's address once per run, without cookies, when you open the message.

Inbox Classic's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Messages are shown with the Microsoft Edge WebView2 Runtime, a part of Windows. Any diagnostic data it sends to Microsoft follows your Windows settings and the Microsoft Privacy Statement.

Your rights

As we hold no personal data about you, there is nothing for us to give you a copy of, correct or delete. Your data is on your computer and with your mail provider, where you control it. If you write to us, we use your message only to answer it.

Changes

If this policy changes, the new version is published on this page with a new effective date.