Privacy Policy
Last updated: September 17, 2026
1. Our Core Principle: Self-Hosted Data Sovereignty
Rookery is built on a simple philosophy: your emails, calendar events, contacts, and authentication credentials belong entirely to you and stay on your hardware.
Unlike centralized cloud email providers, Rookery is a self-hosted client application. When you install and operate Rookery on your server, all IMAP connections, SMTP transactions, CalDAV synchronizations, and database records communicate strictly between your user's browser, your Rookery instance, and your designated mail server.
We do not operate a cloud relay or proxy. We cannot view, inspect, parse, mine, sell, or disclose the contents of your emails, address books, or calendar schedules.
2. Information Collected on rookery.email
When you visit our public landing site (rookery.email), we collect only the minimal data necessary to deliver the site securely:
A. Server Logs
Like virtually all web servers, our edge proxy records standard technical request logs (including IP address, requested URL, user agent, and timestamp). These logs are utilized solely for server administration, rate limiting, and mitigating malicious traffic or DDoS attacks, and are rotated and deleted periodically.
B. Direct Correspondence
If you email us at [email protected] or [email protected], we retain your email address and message history solely to reply to your inquiry, provide technical assistance, or fulfill legal and data protection requests.
3. Billing & Payments
When purchasing commercial license keys or subscriptions, all order processing and payments are handled by an authorized Merchant of Record ("MoR"), such as Lemon Squeezy or Paddle.
Your payment card information is submitted directly to the Merchant of Record and is never received, stored, or processed on Rookery servers. The Merchant of Record provides us only with transaction confirmation details (such as customer name, email address, order ID, and purchased license SKU) so we can issue your license key and provide software updates.
4. Self-Hosted Software Telemetry
The self-hosted Rookery software distribution does not contain invasive telemetry, behavioral trackers, or user tracking cookies.
Software updates and commercial license verifications perform lightweight version checks against our update endpoint to verify license validity and inform administrators of newly available security patches. These requests contain only the license key identifier and software version string.
5. Cookies & Local Storage
On rookery.email, we do not use advertising or third-party marketing tracking cookies. We utilize browser localStorage solely to remember your preferred Catppuccin color theme (Mocha, Macchiato, Frappé, Latte) across sessions.
6. Your Data Rights (GDPR & CCPA/CPRA)
Under the General Data Protection Regulation (GDPR) and applicable data protection laws, individuals in the European Economic Area (EEA), United Kingdom, and Switzerland have specific statutory rights regarding their personal data, including the right of access, rectification, erasure (right to be forgotten), restriction of processing, data portability, and the right to object to processing.
To exercise any of these statutory rights regarding correspondence or customer order data held by Rookery, please email our Data Protection team directly at [email protected]. We respond to all verified requests within thirty (30) days in compliance with statutory deadlines.
Self-Hosted Mailbox Data: Because Rookery is self-hosted software and does not relay, store, or inspect your email messages on our servers, we do not possess custody or control over your self-hosted mailbox contents. Any data subject access requests regarding personal data stored within a self-hosted instance must be addressed directly to the administrator or organization operating that instance.
7. Contact & Data Controller
For privacy inquiries, GDPR data requests, or questions regarding our data practices:
[email protected]
For legal notices, terms inquiries, or dispute resolution correspondence:
[email protected]