Privacy Policy

Introduction

Hold My Mail ("we", "us", "our") operates the holdmymail.app website and related services. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

Information We Collect

Account Information

When you create an account, we collect your email address, username, and password. Your password is securely encrypted and is never stored in plain text.

Email Data

When emails are sent to your @inbox.holdmymail.app address, we receive and store the full email content including sender information, subject, message body, and any metadata. This is the core functionality of the service — holding your emails until you're ready to view them.

Saved Links

When you save links via the website or Chrome extension, we store the URL, page title, description, and publicly available Open Graph metadata (images, site name) fetched from the linked page.

Usage Data

We collect analytics data about your interactions with our website using Fathom Analytics. Fathom collects information such as pages visited, time spent, and referral source — but does not track personal information, use cookies, or share data with third parties. See Fathom's privacy policy for details.

How We Use Your Information

• To provide and maintain the Hold My Mail service
• To receive, store, and deliver your emails on your preferred schedule
• To generate and send digest emails to your delivery address
• To save and organize your bookmarked links
• To authenticate your account and keep it secure

Data Storage

Your data is stored securely using Convex, a cloud database platform. Email delivery is handled through Postmark. We do not sell, rent, or share your personal data with any third parties for marketing purposes.

Authentication & Security

We use token-based authentication. Session credentials are stored in first-party cookies with a 30-day expiration and are scoped to this site. All API communication occurs over HTTPS.

Data Retention

Your emails, links, and account data are retained for as long as your account is active. When you delete an email, link, or sender, the data is permanently removed. If you delete your account, all associated data is permanently deleted.

Your Rights

You have the right to:

• Access all data associated with your account
• Delete individual emails, links, or senders at any time
• Delete your entire account and all associated data
• Export your data by viewing it through the app or API
• Update your email address, password, and delivery preferences

Cookies

Hold My Mail uses first-party cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

Third-Party Services

We use the following third-party services to operate Hold My Mail:

• Fathom Analytics — privacy-friendly website analytics
• Convex — database and backend infrastructure
• Postmark — inbound email receiving and outbound digest delivery
• Vercel — frontend hosting

Each of these services has their own privacy policies governing how they handle data.

Children's Privacy

Hold My Mail is not intended for use by children under the age of 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the updated policy on this page with a revised "Last updated" date.

Contact

If you have any questions about this Privacy Policy, please contact us at zach@zachpatrick.com.