Privacy Policy

Last updated: August 2, 2026

This is a draft prepared based on the product's architecture, not final legal advice. Before publishing, we recommend a review by a lawyer, especially regarding GDPR for users in the EU.

The data controller is the Mailcoded team. The product runs across three surfaces with different scopes of data processing: the marketing site (mailcoded.com), the free checker (free.mailcoded.com), and the app (app.mailcoded.com).

1. Marketing site

The site doesn't require sign-in and doesn't collect contact data beyond what you send us by email yourself. We use PostHog to measure page visits, which sets a cookie to recognize returning visitors. This only happens after you accept the cookie banner shown on your first visit — until then, no analytics cookies are set and no visit data is collected. You can decline at any time from that banner.

2. Free checker (Playground)

• Pasted HTML is processed solely for the purposes of a single QA request and is not stored permanently in a database.
• Because of abuse limits (rate limiting, max HTML size, limit on links checked), we may briefly log the IP address and request metadata.
• We measure product events (e.g. running a QA check) via PostHog — client- and server-side — for analytics and to improve the tool.
• We don't require an account or contact details to use the checker.

Don't paste third-party personal data or confidential content into the checker — even though we don't store HTML permanently, avoid sending anything you wouldn't want shared with an external service.

3. App (workspace)

• Sign-in and organization management are handled by Logto; we store the organization ID and member assignments.
• Templates, locale variants, QA results, pins, and checklists are stored in our database (PostgreSQL) to run the product.
• API keys for ESP providers (Mailchimp, Klaviyo, Brevo) are encrypted (AES-256-GCM) and are never returned in plain text once saved.
• We delete data at the request of an organization admin, subject to obligations under applicable law.

4. Your rights

You can request access to your data, its correction, deletion, or export by writing to the address below. We respond as quickly as possible.

5. Contact

For privacy-related matters, write to[email protected].