Privacy & Legal

MailXa does not collect anything about you.

Last updated: 30 August 2026

Privacy policy

MailXa does not collect any personal information from you during its use. There is no account to create, nothing to sign up for, and no analytics, telemetry, crash reporting or advertising of any kind built into the app. It does not check for updates, and it does not report that you have launched it.

Your settings are stored locally on your Mac. They are never transmitted to or stored on any server belonging to us.

Where your mail actually goes

MailXa is a mail client, not a service. It connects directly from your Mac to whichever mail server you configure it with, over JMAP or IMAP for reading and SMTP for sending. Your messages do not pass through any server of ours, because there is no server of ours. We could not read your mail if we wanted to.

What is stored on your Mac

Your password is stored in the macOS Keychain, which is managed and encrypted by macOS. MailXa never writes it to a file of its own and never sends it anywhere except to the mail server you configured, over an encrypted connection.
A local copy of your mail is kept in a database at ~/Library/Application Support/MailXa/, so your mailbox is on screen the moment the window opens and remains readable offline.
Cached sender logos live in ~/Library/Caches/MailXa/.

Deleting the app and those two folders, and removing its entries from Keychain Access, removes everything MailXa has ever stored.

Every network connection MailXa makes

The complete list, so there are no surprises:

Your mail server, for reading and sending mail. This is the only connection MailXa needs.
Remote images inside a message, which are fetched from whoever sent them and are commonly used to track whether a message was opened. MailXa blocks them by default and tells you it has; loading them is a decision you make per message, or permanently under Settings → Privacy.
Sender logos (BIMI), which involve a DNS lookup for the sender's domain and, if that domain publishes one, fetching an image from the address it names. Each domain is looked up once and the answer is cached. Turn this off under Settings → Viewing with Show BIMI logos if you would rather it never happened.
This website, only if you pick MailXa Help from the Help menu, which opens it in your browser.

Rules and junk mail

Your filtering rules and your allowed and blocked sender lists are not kept in the app. They are written to your own mail server as Sieve scripts, which means they belong to your mail account rather than to this Mac — and they keep working when your Mac is closed.

Third-party services

MailXa talks to the mail provider you choose, and that provider's own privacy policy governs what happens to your mail once it reaches them. If you self-host — with Stalwart, for example — that provider is you. If you use a hosted service such as MXroute, please read their policy. We have no relationship with, and no visibility into, whichever one you pick.

This website

These pages are static files. They set no advertising or tracking cookies. Your light-or-dark choice is remembered in your own browser's local storage and is never sent anywhere.

Two things here are served by Google and, like any request to any server, are visible to them: the web fonts the pages use, and the reCAPTCHA box on the contact form, which exists to keep the form from being used by spammers. Google's privacy policy and terms apply to those.

If you use the contact form, what you write is emailed to us and is not stored on this site. We use your address to reply to you and for nothing else. We do not add anyone to a mailing list, because there is no mailing list.

Licence and warranty

MailXa is free to download and use. It is provided as is, without warranty of any kind, express or implied, including but not limited to the warranties of merchantability and fitness for a particular purpose. You are responsible for your own mail and for keeping your own backups.

We cannot recover your account. MailXa never holds your password or your mail, so there is nothing for us to reset. If you are locked out, your mail provider is the only one who can help — and if you host your own server, that is you.

Contact

Questions about any of the above can go through the contact form on the front page.