MailCraftData and security questions
Answers for security questionnaires and data protection impact assessments. The app privacy notice and security policy are the full documents.
In short
Section titled “In short”- No telemetry. No analytics, no crash reports, nothing about the person or their mail is sent to the MailCraft project.
- No MailCraft server. MailCraft connects straight to the mail provider. There is no service in between.
- Mail is kept on the computer, in the person’s own folder.
- Sign-ins are kept in the system’s credential store, never in a file.
Where data is kept
Section titled “Where data is kept”| System | Folder |
|---|---|
| Windows | %APPDATA%\MailCraft |
| macOS | ~/Library/Application Support/MailCraft |
| Linux, FreeBSD | $XDG_CONFIG_HOME/mailcraft, usually ~/.config/mailcraft |
The folder holds the mailbox (mailbox.mailcraft, its attachments folder and its search index), settings and logs. Attachments that are opened are copied to the cache folder and removed when MailCraft quits. Pictures downloaded on request are kept for up to 30 days and can be cleared in File › Options.
On Linux and FreeBSD, files are readable only by their owner. The mailbox is not encrypted by MailCraft. Use full-disk encryption: BitLocker, FileVault, LUKS or GELI.
Sign-ins and passwords
Section titled “Sign-ins and passwords”Remembered sign-ins and passwords go into Windows Credential Manager, the macOS keychain, or the Secret Service (GNOME Keyring or KWallet), under the name MailCraft. Short-lived access tokens are never stored. A person can stop MailCraft remembering sign-ins in File › Options › Remember passwords and sign-ins on this computer.
Microsoft sign-ins use OAuth 2.0 with PKCE in the system browser. MailCraft never sees the password.
What MailCraft connects to
Section titled “What MailCraft connects to”| Where | When |
|---|---|
| The mail provider (IMAP, SMTP, or Microsoft Graph and Microsoft sign-in) | To fetch and send mail |
| Cloudflare’s DNS over HTTPS, then Google’s | When Connect is pressed while adding an account, to find the mail servers. Only the domain is sent. |
| Web servers that host pictures in a message | Only when the person asks to show pictures. No cookies, referrer or credentials are sent. |
api.github.com and GitHub release downloads |
Only if the person agreed to update checks |
Every connection that carries mail or a sign-in uses TLS, with certificates checked. MailCraft never falls back to a plain connection.
Reading mail safely
Section titled “Reading mail safely”Nothing in a message runs. MailCraft lays out HTML mail without running scripts, and doesn’t fetch anything from the network unless the person asks.
What’s not there yet
Section titled “What’s not there yet”No S/MIME or PGP, no remote wipe, and no command to remove MailCraft’s data from a computer. To remove it by hand, delete the folder above and the MailCraft entries in the credential store. These features are planned. See the security policy to report a problem.