Privacy Policy

Last Updated: July 2026

1. Privacy-First Principles

Emailnya is designed so that we physically cannot access your sensitive data. We believe the safest data is the data we never collect.

2. Local Browser Storage

All email designs, layout settings, configurations, and draft content you write inside the visual editor are saved locally inside your browser's sandboxed environment (`localStorage` and IndexDB).

This data is never transmitted to our servers on design edits. If you clear your browser cookies or storage, your layouts will be deleted unless you export them as JSON.

3. Connectors & API Keys

When using the "Send Live Test" features for platforms like **Resend, Brevo, Mailchimp, or AWS SES**:

  • Your secret API keys and tokens are stored locally inside your browser's secure cache.
  • When clicking "Send Test Email", the client passes the API key inside the request header over HTTPS to our serverless proxy route.
  • Our proxy server relays the request to your provider and returns the result. **We never save, cache, or log your credentials on our servers.**

4. Campaign Analytics (Opt-In)

If you explicitly enable Campaign Tracking for an export, the application appends an open pixel and click redirectors:

  • No PII Logging: We aggregate counts of opens and clicks. We never record subscriber email addresses, names, or individual identity metrics.
  • IP Truncation: If IP addresses are analyzed for rate-limiting or duplicate-filtering, they are automatically truncated and discarded from memory immediately.
  • Log Expiration: Raw metric events expire and delete from our database within 30 to 90 days.

5. Open Source Extension

Our Google Chrome companion extension contains zero tracking scripts, does not communicate with external analytics tools, and only accesses the `chrome.storage.local` API inside your local sandbox.