Privacy Policy
Last updated: September 17, 2026
1. Our Core Principle: Self-Hosted Data Sovereignty
Rookery is built on a simple philosophy: your emails, calendar events, contacts, and authentication credentials belong entirely to you and stay on your hardware.
Unlike centralized cloud email providers, Rookery is a self-hosted client application. When you install and operate Rookery on your server, all IMAP connections, SMTP transactions, CalDAV synchronizations, and database records communicate strictly between your user's browser, your Rookery instance, and your designated mail server.
We do not operate a cloud relay or proxy. We cannot view, inspect, parse, mine, sell, or disclose the contents of your emails, address books, or calendar schedules.
2. Information Collected on rookery.email
When you visit our public landing site (rookery.email), we collect only the minimal data necessary to deliver the site securely:
A. Server Logs
Like virtually all web servers, our edge proxy records standard technical request logs (including IP address, requested URL, user agent, and timestamp). These logs are utilized solely for server administration, rate limiting, and mitigating malicious traffic or DDoS attacks, and are rotated and deleted periodically.
B. Direct Correspondence
If you email us at [email protected], we retain your email address and message history solely to reply to your inquiry, provide technical support, or fulfill enterprise requests.
3. Billing & Payments
When purchasing commercial license keys or subscriptions, all order processing and payments are handled by an authorized Merchant of Record ("MoR"), such as Lemon Squeezy or Paddle.
Your payment card information is submitted directly to the Merchant of Record and is never received, stored, or processed on Rookery servers. The Merchant of Record provides us only with transaction confirmation details (such as customer name, email address, order ID, and purchased license SKU) so we can issue your license key and provide software updates.
4. Self-Hosted Software Telemetry
The self-hosted Rookery software distribution does not contain invasive telemetry, behavioral trackers, or user tracking cookies.
Software updates and commercial license verifications perform lightweight version checks against our update endpoint to verify license validity and inform administrators of newly available security patches. These requests contain only the license key identifier and software version string.
5. Cookies & Local Storage
On rookery.email, we do not use advertising or third-party marketing tracking cookies. We utilize browser localStorage solely to remember your preferred Catppuccin color theme (Mocha, Macchiato, Frappé, Latte) across sessions.
6. Your Data Rights
Depending on your location (including under GDPR or CCPA/CPRA), you may have the right to request access to, correction of, or deletion of any personal data we hold about you (such as your customer support history or license contact information). Because we do not host your self-hosted mailbox data, any mailbox-level requests must be handled within your own organization or server infrastructure.
7. Contact Us
For any questions regarding this Privacy Policy, or to submit a privacy request, please reach out to:
[email protected]