England Mail
Create account

Legal

Privacy policy

Last updated: 2026. This policy explains, in plain terms, what England Mail does with your information.

The short version. We store only what we need to run your inbox. We do not sell your data, we do not show adverts, we do not use third-party trackers, and we do not read your messages to profile you.

Who we are

England Mail is an independent email service operated by England Mail Ltd. For the personal data described below, England Mail Ltd is the data controller. If you have any question about this policy, please write to us at privacy@england-mail.com.

What we collect

  • Your account details. The email address you choose, an optional display name, and a securely hashed version of your password. We never store your password in a readable form.
  • Your messages. The mail you send and receive within England Mail, including the sender, recipient, subject, body, timestamps and read status, so we can deliver and display it to you.
  • Session information. A signed session identifier so we can keep you logged in, and a security token to protect the forms you submit.

We do not ask for a phone number, and we do not require any payment details to create a free inbox.

How we use it

  • To create and secure your account and to sign you in.
  • To deliver, store, display and search your mail.
  • To keep the service running safely and to prevent abuse.

We do not use your information for advertising, and we do not build a marketing profile of you.

What we never do

  • We never sell, rent or trade your personal data.
  • We never display adverts in your inbox.
  • We never scan the content of your messages to target advertising.
  • We never embed third-party tracking or analytics scripts in the app.

Cookies

England Mail uses only the cookies it needs to function. There are no advertising or tracking cookies.

  • Session cookie - keeps you signed in. It is signed, marked so scripts cannot read it, and set to be sent only to England Mail.
  • Security token cookie - protects forms against cross-site request forgery.

Both are essential to the service. Signing out clears your session.

How long we keep it

We keep your account and mail for as long as your account is open. Expired sessions are cleared automatically. If you ask us to delete your account, we remove your account and its mailbox contents.

Security

We protect your account with a slow, salted password hash and constant-time verification, signed session cookies, cross-site request forgery protection on every form, output escaping to prevent malicious content running in your browser, and a strict content security policy. No system is perfect, but security is a first-order concern for us, not an afterthought.

Your rights

Under UK data protection law, including the UK GDPR and the Data Protection Act 2018, you have the right to access the personal data we hold about you, to have it corrected or deleted, and to object to or restrict certain processing. To exercise any of these rights, write to privacy@england-mail.com and we will respond within the time the law allows.

Changes to this policy

If we make a material change, we will update this page and revise the date at the top. Your continued use of England Mail after a change means you accept the updated policy.

Questions about your privacy? Please write to privacy@england-mail.com.