Privacy policy

Last updated: 10 August 2026 · Data controller: Helium22 (United Kingdom)

The short version: your mail never touches our servers. MailSplat's scanning engine runs in your browser, and scan results stay on your device. The only data we hold about you is what an ordinary website account needs.

1. Account data we store

When you create a MailSplat account we store:

  • Your email address (used as your username) and optional contact email;
  • Your first and last name, and a screen name;
  • A hash of your password and of your recovery key — never the values themselves;
  • Your two-factor authentication (TOTP) secret, used only to verify sign-in codes;
  • Sign-in records (time, IP address, and a fingerprint of your browser) used for rate-limiting and to warn you about sign-ins from unfamiliar devices;
  • An audit trail of account-level events (registration, password changes, admin actions).

Emails we send you are limited to account activation links, password reset and change confirmations, recovery-key notices and new-device alerts.

2. Mail data — browser only

When you connect a mailbox, your browser talks directly to Microsoft (Graph API) or Google (Gmail API):

  • You sign in on Microsoft's or Google's own page. MailSplat never sees or stores your mailbox password.
  • The access token your browser receives is held by your browser, not by us.
  • Scan results — senders, subjects, sizes, dates — are stored in your browser's IndexedDB, on your device. They are never uploaded to MailSplat's servers, and we could not read them if we wanted to.
  • Clearing your browser's site data for MailSplat removes every scan snapshot.

Revoking access: you can withdraw MailSplat's access to your mailbox at any time, independently of us — in your Microsoft account's app permissions or your Google account's third-party connections.

3. Payments (Stripe)

Pro subscriptions are paid through Stripe's hosted checkout. Your card details are entered on Stripe's pages and handled by Stripe alone — MailSplat never sees, transmits or stores card numbers. We store only your Stripe customer ID and your subscription's status and renewal date, which is what we need to know whether your account is Pro. Stripe's own privacy policy applies to the payment itself.

4. Cookies and advertising

  • Essential: one session cookie that keeps you signed in. It contains a random identifier and nothing else, and it is not used for tracking.
  • Advertising: pages may show Google AdSense adverts. Where consent is required, AdSense only runs after you have given it through the consent banner, and Google's use of advertising cookies is governed by Google's advertising policies. Declining consent does not affect any MailSplat feature.

5. Your rights (UK GDPR)

Under the UK General Data Protection Regulation you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Because mail data never reaches us, these rights in practice apply to your account data — and most of it is visible and editable from your account already. To exercise any right, use the contact page. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

6. Retention and deletion

Account data is kept while your account exists. If you delete your account, its data is removed from our systems; subscription records required for tax and accounting purposes are retained only as long as the law requires. Scan data on your device is yours to delete at any time via your browser's site-data controls.

7. Changes

If this policy changes materially we will update this page and note the date at the top. Continued use of MailSplat after a change means the updated policy applies.

See also: Terms of service · About MailSplat