- Your privacy is important to us. It is our policy to respect your privacy
- regarding any information we may collect from you across our website,
- We only ask for personal information when we truly need it to provide the - service to you. We collect it by fair and lawful means, with your knowledge - and consent. We also let you know why we're collecting it and how it will be - used. -
-- We only retain collected information for as long as necessary to provide you - with your requested service. What data we store, we protect within - commercially acceptable means to prevent loss and theft, as well as - unauthorised access, disclosure, copying, use or modification. -
-- You are free to refuse our request for your personal information, with the - understanding that we may be unable to provide you with some or all of our - service. -
-- All personal records, including your keys, email metadata, and any email - content, is encrypted at rest in our database. -
-- If you are an EU resident then you have the right at any time to request all - the personal information we have for you as dictated by the General Data - Protection Regulation (GDPR). Under the same regulation, we will also delete - any or all of this information at your request. -
-- If you are not an EU resident then we will still provide this information to - you if you ask for it, because we believe you should have these rights - regardless of where in the world you live. -
-- In addition, you can choose to delete your account from the profile page, - which results in your data being automatically removed irreversibly from our - system and your browser. -
-- In order to present a list of your mailing lists, we fetch your email data - from your email provider and parse it into a localized format. -
-- When you connect your Gmail or Google Workspace (formerly G Suite) account - to the service we need the following OAuth scopes: -
-
- You can view your Google App permissions or revoke access to Leave Me Alone
- at any time
- When you connect your Outlook, Exchange, or Office365 account to the service - then we need the following OAuth scopes: -
- -- When you connect your IMAP account to the service we do not need any extra - permissions. -
- -- For users only using the service to unsubscribe, we store metadata of the - emails that we find in order to sync unsubscribes between devices. This - includes the email envelope (to and from addresses), so that we can identify - if you have unsubscribed from a subscription previously. -
-- We do not store any content, or other information of these emails and if you - delete your account this information is deleted irrevocably. -
-- We are dedicated to upholding the privacy of your information and agree to - never do anything with this email metadata except provide you an excellent - service through this website. -
-- For our Rollups feature, when you add an email sender to a Rollup (and that - Rollup is enabled), we fetch the content for emails that you have received - from that sender in the last 7 days (maximum). -
-- Until the Rollup is disabled, deleted, or the sender is removed, we fetch - and store the content of emails that you receive from that sender, as you - receive them into your connected email account(s). -
-- This email content is only used to build your Rollup, and is retained should - you wish to view the Rollup at a later date. It is not used for any other - purpose than to provide you with the Rollups service. -
-- We never fetch or store the content of any other emails as a part of this - process, and all email content is encrypted at rest in our database. -
-- Three months after a Rollup is sent to you, any metadata, images, or - contents associated with the Rollup are removed from our servers, with the - exception of email counts and statistics. -
-- If you delete your account, delete the Rollup, or remove a sender from the - Rollup, then any email content or metadata we store related to the Rollup or - the sender is deleted permanently. -
- -- When the Inbox Shield feature is enabled, and if the "block all" - functionality is turned on, we fetch metadata of all senders who email you, - until the feature is turned off or your account is deleted. -
-- When the Inbox Shield feature is enabled, and if the "allow all" - functionality is turned on, we fetch metadata only for senders who email you - who appear on your active Blocklists, until the feature is turned off or - your account is deleted. -
-- The metadata includes to and from email addresses, subject line, dates and - counts of how many times that sender has emailed you since you enabled the - functionality. -
-- This information is used solely for the purpose of providing the Inbox - Shield Screener service, which allows you to control who is allowed to email - you. -
-- If the Inbox Shield feature is disabled, this metadata is retained (along - with the action you asked us to perform on this sender), in case you would - like to re-enable it in the future. -
-
- You can read more about the above on our
- We don't share any user data publicly or with third-parties, except when - required to by law. To date this has never been requested and we can't - imagine why it would be. -
-- We do use a few third-party scripts with whom we share non-personal data for - the following purposes; -
-
- Page view analytics (
- In-app support chat (
- Error handling (
- Payment processing (
- Infrastructure management (
- Product analytics (
+ Your privacy is important to us. It is our policy to respect your privacy
+ regarding any information we may collect from you across our website,
+ We only ask for personal information when we truly need it to provide the
+ service to you. We collect it by fair and lawful means, with your
+ knowledge and consent. We also let you know why we're collecting it and
+ how it will be used.
+
+ We only retain collected information for as long as necessary to provide
+ you with your requested service. What data we store, we protect within
+ commercially acceptable means to prevent loss and theft, as well as
+ unauthorised access, disclosure, copying, use or modification.
+
+ You are free to refuse our request for your personal information, with the
+ understanding that we may be unable to provide you with some or all of our
+ service.
+
+ All personal records, including your keys, email metadata, and any email
+ content, is encrypted at rest in our database.
+
+ If you are an EU resident then you have the right at any time to request
+ all the personal information we have for you as dictated by the General
+ Data Protection Regulation (GDPR). Under the same regulation, we will also
+ delete any or all of this information at your request.
+
+ If you are not an EU resident then we will still provide this information
+ to you if you ask for it, because we believe you should have these rights
+ regardless of where in the world you live.
+
+ You can also delete your account yourself from the profile page. That
+ happens immediately. Your mail data, your connected accounts and their
+ credentials, your Rollups, your Shield data, and your user record are all
+ removed there and then, we log you out of every device, and you won't be
+ able to sign in again.
+
+ Three things outlast that, and we'd rather name them than let "delete"
+ imply a clean wipe:
+
+ A copy of your user record is kept for 3 days in case a
+ deletion turns out to be a mistake or needs looking into. After that it's
+ destroyed.
+
+ Our database backups are the one thing we can't reach into. They're
+ encrypted, and they're kept for a maximum of 90 days.
+ If you were in our system when a backup was taken, your data stays in
+ that backup until it's deleted along with it.
+
+ If you had Spam Blocker turned on, samples of your mail collected to
+ train our classifiers are deleted on their own schedule rather than
+ with your account. That's explained under
+ In order to present a list of your mailing lists, we fetch your email data
+ from your email provider and parse it into a localized format.
+
+ When you connect your Gmail or Google Workspace (formerly G Suite) account
+ to the service we need the following OAuth scopes:
+
+ You can view your Google App permissions or revoke access to Leave Me
+ Alone at any time
+ When you connect your Outlook, Exchange, or Office365 account to the
+ service then we need the following OAuth scopes:
+
+ When you connect your Yahoo account to the service then we need the
+ following OAuth scopes:
+
+ When you connect your IMAP account to the service we do not need any extra
+ permissions.
+
+ For users only using the service to unsubscribe, we store metadata of the
+ emails that we find in order to sync unsubscribes between devices. This
+ includes the email envelope (to and from addresses), so that we can
+ identify if you have unsubscribed from a subscription previously.
+
+ We do not store any content, or other information of these emails and if
+ you delete your account this information is deleted irrevocably.
+
+ Some senders only accept unsubscribes by email. For those we send a formal
+ unsubscribe and data removal request on your behalf, which names your
+ email address and asks them to remove it under your data protection
+ rights. It goes from our own address, not yours, so replies come to us
+ rather than landing back in your inbox. The sender already has your
+ address, since they've been emailing you with it.
+
+ We are dedicated to upholding the privacy of your information and agree to
+ never do anything with this email metadata except provide you an excellent
+ service through this website.
+
+ For our Rollups feature, when you add an email sender to a Rollup (and
+ that Rollup is enabled), we fetch the content for emails that you have
+ received from that sender in the last 7 days (maximum).
+
+ Until the Rollup is disabled, deleted, or the sender is removed, we fetch
+ and store the content of emails that you receive from that sender, as you
+ receive them into your connected email account(s).
+
+ This email content is only used to build your Rollup, and is retained
+ should you wish to view the Rollup at a later date. It is not used for any
+ other purpose than to provide you with the Rollups service.
+
+ As part of the Rollups process we only fetch content from the senders you
+ have added to a Rollup. No other sender in your mailbox is touched by it,
+ and all email content is encrypted at rest in our database.
+
+ Three months after a Rollup is sent to you, any metadata, images, or
+ contents associated with the Rollup are removed from our servers, with the
+ exception of email counts and statistics.
+
+ If you delete your account, delete the Rollup, or remove a sender from the
+ Rollup, then any email content or metadata we store related to the Rollup
+ or the sender is deleted permanently.
+
+ The Screener watches mail as it arrives so you can decide who's allowed to
+ reach you. For this to work we fetch metadata of each sender who emails
+ you live as the email is received.
+
+ The metadata includes to and from email addresses, subject line, dates and
+ counts of how many times that sender has emailed you since you enabled the
+ functionality.
+
+ If the Screener feature is disabled, this metadata is retained (along with
+ the action you asked us to perform on this sender), in case you would like
+ to re-enable it in the future.
+
+ When enabled The Spam Blocker watched mail as it arrives in your inbox,
+ determines which emails are spam, and then moves those emails out of your
+ inbox. To do this it needs the body text of the emails,
+ and not just the metadata. In some instances the only way to identify spam
+ is to match the content against other known spam emails.
+
+ The classifiers we use to identify spam are owned by us, and processed by
+ our own spam detection engine.
+
+ To improve the spam classification for everyone, we sometimes retain a
+ corpus of spam emails to use for further training. This is explained
+ further in the
+ The Spam Blocker is turned off unless you turn it on. Turn it off and we
+ stop reading the content of your incoming mail for it. We will never read
+ email content without your permission.
+
+ These features change when mail reaches you rather than whether
+ it does. Each one works using email metadata:
+
+ If you've turned on our email digest, we email you a summary of what's
+ been held. That digest contains sender names and subject lines from your
+ own mailbox, sent to your own address.
+
+ You can read more about the above on our
+ We use AI in a few places to save you time, mostly for summarising mail
+ and working out what's junk.
+
+ We believe that AI should never be used as a stand-in for something that
+ can be done without it, so we use it sparingly and with caution.
+
+ We also think with AI specifically, you deserve to know exactly where it
+ runs, what it sees, and how it's being trained, so here's all of it.
+
+ Our spam engine runs on hardware we rent and manage ourselves. It reads
+ the full email, headers and body, to score how likely it is to be spam.
+ It's rules and statistics rather than a large language model, and none of
+ those details are ever sent to a large language model.
+
+ Some features need a large language model, and those we don't run
+ ourselves. Here is every one of them, and exactly what it sends:
+
+ Rollup and Screener summaries. We send the sender names
+ and subject lines of the emails in your Rollup or Screener digest so we
+ can summarise them for you. We do not send the body of those emails. This
+ is on by default and you can turn it off with the "summarise with AI" setting.
+
+ Spam and cold email classification. If you have Spam Blocker
+ turned on, we might sample incoming mail to improve the classifier over
+ time and keep up with changing spam trends.
+
+ This sample includes the sender, the subject line, and a truncated
+ portion of the text body. This is sent to our AI model to be
+ classified.
+
+ The Unsubscriber. When we unsubscribe you from something
+ that has no simple unsubscribe link, an AI agent works through the sender's
+ unsubscribe page on your behalf. It reads the content of that page, takes
+ screenshots of it, and where the form asks for it, types in your email address.
+ That is the address the sender already has, and is the most effective way
+ an unsubscribe can be completed.
+
+ Every one of those requests goes through
+ For the Rollup and Screener summaries specifically, we ask the gateway to
+ keep a copy of the request against your account ID, which we use to debug
+ summaries that come out wrong. That means the sender names and subject
+ lines in those requests are retained by DigitalOcean rather than discarded
+ once the summary comes back.
+
+ Our support is run by humans, but because we're a small team our humans
+ sometimes need help from AI.
+
+ In these cases we use Anthropic's Claude to help us out. When you email
+ us, the content of your message and the address you sent it from may be
+ processed by Anthropic as part of that. If you'd rather your support
+ conversation never touched an AI model, say so in your email subject and
+ it will only ever be seen by a human.
+
+ We use real email content to train our own spam and cold email
+ classifiers. This is the part people most want to know about, so to be
+ completely clear:
+ Privacy Policy
+ 1. Personal information
+ 2. GDPR
+
+
+ 3. The Service
+ a. Retrieving email data
+ i. Gmail or Google Workspace
+
+
+
+
+
+
+
+ ii. Outlook/Exchange/Office365
+
+
+
+
+
+ iii. Yahoo
+
+
+
+
+
+
+
+
+
+ iv. Other/IMAP
+ b. Storing email data
+ i. Unsubscribing
+ ii. Rollups
+ iii. Screener
+ iv. Spam Blocker
+ v. Priority senders, do-not-disturb schedules, and snoozing
+
+
+ 4. AI and automated processing
+ a. What runs on our own servers
+ b. What we send to hosted AI models
+
+
+
+ c. Where those models run
+ d. AI and support
+ e. Training our own classifiers
+
+
- We have ensured that the respective privacy policies of these companies - align with our own values. -
-- Our website may link to external sites that are not operated by us. Please - be aware that we have no control over the content and practices of these - sites, and cannot accept responsibility or liability for their respective - privacy policies. -
-- To provide the unsubscription service we also occasionally display images to - you that are fetched from external sites. The intention of these images is - to show you if an particular unsubscribe was successful. However, we have no - control over these images and cannot accept responsibility or liability for - their content. -
-- These images can only seen by you, unless you specifically share them with - us for product improvement purposes. If you want us to remove a specific - image from our systems then let us know. -
-- To provide the Rollup service, we store and display email content that has - been sent to you from an external source. This email content may contain - images and hyperlinks that direct you to external websites. We are only - displaying this information as it was received into your inbox, and cannot - accept responsibility or liability for it's content, or any content of - linked websites. -
- -- We collect statistical information such as the total quantity of emails we - have scanned and the total number of subscriptions that have been - unsubscribed from. As well as various financial details. -
-- This data does not contain any personal identifying information and is only - stored as counts or percentages. -
-
- We periodically share this information publicly with our followers on social
- media for the sole purpose of documenting and sharing our successes and
- failures as an
- You can see an example of what we do with this data on our
- We believe that by following these rules we can keep your data as safe as
- possible, but if you have any suggestions on how we can improve then
- Your continued use of our website will be regarded as acceptance of our
- practices around privacy and personal information. If you have any questions
- about how we handle any of our data, feel free to
- This policy was last updated on the 8th September 2025. -
-
-
-
-
-
-
-
-
-
As stated, we utilise AI in a very restricted and controlled manner.
++ AI models will never get access to your mailbox. They don't get your + credentials, your OAuth tokens, or the ability to read, send, or delete + your mail. They only ever see the specific text we send them, for the + specific tasks described above. +
+ ++ We don't sell user data, and we don't share it publicly or with anyone + except the companies listed below, or when required to by law. To date no + legal request has ever been made. +
++ Some of the companies below do receive personal data, because they can't + do their job without it. +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ We occasionally route unsubscribe requests through third-party proxy + networks. The unsubscribe link and the pages it leads to pass through + those networks. +
+ ++ A lot of things a company our size would normally outsource, we run on our + own servers instead. Our spam engine, our marketing email, and our team + chat are all self-hosted, so no other company sees the data behind them. + All of this is a deliberate choice rather than an accident. +
++ We have ensured that the respective privacy policies of all the companies + above align with our own values. +
+ ++ We don't run any third-party advertising or tracking scripts on our + website. No Facebook pixel, no ad network tags, nothing following you + around the internet. +
++ We do set one first-party cookie, called lma_attr. If you + arrive from one of our Google ads, it stores the click ID from that ad + along with any campaign parameters in the link. It lasts 90 days, it's only readable by our own servers, and it contains nothing about + you personally. +
++ If you then buy a subscription, we tell Google Ads that the click resulted + in a purchase, along with the value. That upload includes your email + address as a SHA-256 hash rather than the address itself, which is how + Google matches the conversion up without us handing the address over. +
++ Beyond that we use ordinary cookies to keep you logged in, which are + necessary for the service to work at all. +
+ ++ The short version is that we keep data for as long as we need it to run + the service for you, and no longer. The specific windows worth knowing: +
++ Our website may link to external sites that are not operated by us. Please + be aware that we have no control over the content and practices of these + sites, and cannot accept responsibility or liability for their respective + privacy policies. +
++ To provide the unsubscription service we take screenshots of the sender's + unsubscribe page, so we can show you whether a particular unsubscribe + actually worked. We have no control over what's on those pages and cannot + accept responsibility or liability for their content. +
++ These screenshots are taken by our system. They're pictures of a third + party's web page that our own service captured, and we use them to check + that unsubscribes are working and to improve the service. +
++ We use some of these images to improve our system and to help other + visitors get through the unsubscribe process. We never disclose personal + information from these images. Before they're stored, they're processed by + Google's Document AI to detect and redact personal information that + appears in them. +
+ +
+ If you'd like us to remove a specific screenshot from our systems,
+ To provide the Rollup service, we store and display email content that has + been sent to you from an external source. This email content may contain + images and hyperlinks that direct you to external websites. We are only + displaying this information as it was received into your inbox, and cannot + accept responsibility or liability for it's content, or any content of + linked websites. +
+ ++ We collect statistical information such as the total quantity of emails we + have scanned and the total number of subscriptions that have been + unsubscribed from. As well as various financial details. +
++ This data does not contain any personal identifying information and is + only stored as counts or percentages. +
+
+ We periodically share this information publicly with our followers on
+ social media for the sole purpose of documenting and sharing our successes
+ and failures as an
+ We believe that by following these rules we can keep your data as safe as
+ possible, but if you have any suggestions on how we can improve then
+ Your continued use of our website will be regarded as acceptance of our
+ practices around privacy and personal information. If you have any
+ questions about how we handle any of our data, feel free to
+ This policy was last updated on the 8th August 2026. +
+
+