Privacy

Mailspo archives marketing email from subscriptions we create ourselves. We are the subscriber of record for every address in the archive, not the brands, and not you.

What's public

The email content, the sender, the subject line and the send date are public. That is the archive.

If you create an account

An account stores your email address, a display name we build from it (the part before the @, not something you choose), an internal account id, a hashed password, and when the account was created, updated and last signed in. We never store your password itself, so we cannot read it back to you. Signing in also creates a session: a hashed token, plus when it was created and when it expires. It also carries a last-seen field, but that is only set once, at creation, and never updated after, so it just repeats when the session started. The brands you follow and the emails you save are tied to the account too, each stamped with when you added it. Reading history is tied to the account as the email id and the time you last opened it, so all three are there next time you sign in.

If you don't create an account

Signed out, following, saving and reading history live in cookies in your browser instead: brand ids, email ids, and the times those emails were opened, nothing that identifies you. Sign up later and those lists move onto the account automatically.

The add-a-brand form

Submitting the form is checked against Cloudflare Turnstile and a rate limiter, both there to stop abuse rather than to identify you. The rate limiter records a hashed key derived from the submission, never your raw IP address or email. The form does ask for your email address, though, and we store it trimmed and lowercased, tied to the brand you named, so we can send you the one email it promises.

Tracking

We don't run third-party analytics or advertising trackers on this site. Opening an email does get recorded, once per visitor per email per day: the email's id, the UTC day, and a salted identifier. Signed in, that identifier is built from your account id. Signed out, it is a salted hash of your IP address and browser instead, so the raw IP address and browser string are never stored. This daily analytics row is separate from the reading history described above.

Removing a brand

If your brand is in the archive and you want it gone, email us. We remove it by hand. There is no self-serve switch yet, so it will not happen the second the email lands, but every request gets actioned and we reply once it's done. See Contact.