Privacy policy

Last updated 4 September 2026

This is the privacy policy of mssgs mail. It is kept short and written in plain language, because a privacy policy nobody reads protects nobody. What is written here is what we do.

mssgs mail is an email service in beta. You get an address on mssgsmail.com and you use it to send and receive mail. To make that work we have to store a number of things about you. Below is what, why and for how long.

1. Who we are

mssgs mail is a product of Deverence Group B.V., based in the Netherlands. Deverence Group B.V. is the controller for the data named in this policy.

Questions about this policy or about your data go to support@mssgsmail.com.

2. What we process

  • Your account. Your username, your display name, your password in hashed form, and the recovery address if you gave one.
  • Your mail. The messages you receive and send, with their subject, text, formatting, attachments, recipients and the technical headers. For incoming mail we also keep the untouched original.
  • Your address list. The addresses you correspond with, with how often and when last, so we can suggest them while you write.
  • Your settings. Your signature, your spam threshold, your language and your display preferences, plus the senders you marked as spam or as trusted.
  • The mail flow. For every message our mail server is offered we briefly keep which address it came from, which address it was for, how large it was and what happened to it.

We do not ask for payment details, because the beta is free.

3. Why we process it

To perform our agreement with you: without storing your mail we cannot give you a mailbox. That is the basis for your account, your messages, your attachments, your address list and your settings.

For a legitimate interest: the short mail-flow log and the limits on sending and signing up exist to keep abuse and spam out, and to be able to tell why a message did not arrive.

We do not use your data for advertising, we do not build a profile from it, and we do not read the content of your mail.

4. Where it lives

On our own servers in the Netherlands, inside the European Union. Your messages, your attachments and your address list do not leave the EU. We use no providers outside the European Economic Area for storing or processing this data.

Mail you send to someone outside the EU does of course travel to that recipient's mail server. That is how email works and it is not something we control.

5. How long we keep it

  • Your mail is kept for as long as your account exists. What you throw away stays in Trash for thirty days and is then permanently deleted, attachments included.
  • The mail-flow log expires by itself after fourteen days.
  • Your account and everything attached to it is deleted when you ask us to.

6. Who else sees it

Nobody, apart from the recipients you write to yourself.

We do not sell your data, we do not hand it to advertisers and we do not trade it. We share something only where the law obliges us to, and then only what is asked for and no more.

Our people do not look in your mailbox. When something is broken we only look with you when you ask us to and give permission.

7. Your rights

You have the right to see your data, to have it corrected, to have it deleted and to object to the processing. Send your request to support@mssgsmail.com from your own address. We reply within thirty days.

If you disagree with how we handle your data you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

8. Security

Connections to the client and between our own parts run over TLS. Mail to other servers goes over TLS wherever the other side offers it. Your password is stored hashed and you can turn on two-factor with an authenticator app.

Your messages are not end-to-end encrypted. We say that explicitly: searching your own mail happens on the server, and that cannot work if the server cannot read the content.

In the event of a data breach that puts you at risk we will inform you and the Autoriteit Persoonsgegevens within seventy-two hours, as the GDPR requires.

9. Cookies and this website

This website sets no cookies and loads nothing from third parties. No fonts from someone else, no scripts from someone else, no analytics and no ad network. The few small scripts on these pages come from this server and record nothing.

The mail client at /app keeps your session in your own browser's storage so you stay signed in. That is not a cookie and it does not go to a third party.

10. Changes

If something about this policy changes we will update this page and put the new date at the top. For a change that genuinely matters we will tell you at your mssgs mail address.