Privacy policy
Effective October 9, 2026
This policy covers Dalin Mail at www.dalinmail.com: what it collects, why, where it is kept and how to remove it. “We” means Dalin Mail.
What we collect
Your sign-in. When you sign in with Google we receive your name, email address and profile picture, and use them to create your account. A cookie keeps you signed in for up to 30 days.
Gmail and Outlook accounts you connect.We store the access tokens Google or Microsoft issue so the app can sync and send on your behalf. For each message we store the sender, recipients, subject, date, a short preview, its folder and labels, whether it is read or starred, and the message body and attachments. When you connect an account we copy the last 30 days of mail. After that we keep each mailbox's messages for 90 days, or for the period you choose for it in Settings, from 30 days to a year. Older messages are removed every day, together with their stored bodies. Messages you archive are removed sooner, when they clear from Archive (30 days after you archive them unless you choose otherwise); Gmail and Outlook keep their copies. Bodies left over from before October 2026 go when you remove the mailbox or delete your account, or when you ask us.
Contact photos.If you allow it when you connect a mailbox, we read the email addresses and photos of your Google contacts and of the people Gmail saved because you wrote to them, or of your Outlook contacts. We keep each address with a link to its photo (for Outlook, the contact's id) so the photo can show next to that person's mail, and we refresh the list daily. Removing the mailbox deletes it.
dalinmail.com addresses. Mail sent to and from an address you claim is stored until you delete the address or your account, or ask us to delete it. Mail you archive is deleted when it clears from Archive, 30 days after you archive it unless you choose 7 or 90 days in Settings.
Mail you send. We keep a record of each send (recipients, subject, time and whether it succeeded) for 90 days.
In your browser.The app keeps a copy of your account list and recent messages in your browser's storage so it opens quickly. Clearing this site's data in your browser removes it.
We don't use analytics or advertising trackers.
How we use it
Only to run the features you use: showing your mail, sending what you write, and keeping read and unread state in step with Gmail and Outlook. We don't sell your data, use it for advertising, or use it to train AI models.
Nobody reads your email, except when you ask for help with a specific message, when it is needed to investigate abuse or a security problem, or when the law requires it.
Google user data
Dalin Mail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who handles it for us
We use these providers to run the service, and share your data with them only for that: Vercel (hosting), Turso (database), Cloudflare (file storage and receiving mail for dalinmail.com), and Resend (sending mail from dalinmail.com addresses). Google and Microsoft hold the accounts you connect. We share data otherwise only when the law requires it.
To find a picture for a sender, our servers send Gravatar a one-way hash of the sender's address, and send Logo.dev the sender's domain. These requests come from our servers rather than your browser, and they carry nothing about you. Logos provided by Logo.dev.
Security
Connections to the app and between its services use HTTPS. Access tokens stay on our servers and are never sent to your browser.
Your choices
Disconnecting a Gmail or Outlook mailbox in Settings, or deleting a dalinmail.com address, deletes that mailbox's mail from Dalin Mail. Disconnecting Gmail also ends our access to it.
You can remove Dalin Mail's access at any time: for Google, at myaccount.google.com/connections; for a personal Microsoft account, at account.live.com/consent/Manage.
To delete your account and everything we store about you, go to Settings > Account and devices > Delete my account. This can't be undone. If you can't sign in, email gomezsj12@gmail.com and we delete it within 30 days.
To keep a copy of your mail first, use Settings > Storage and data > Download everything.
Children
Dalin Mail is not meant for children under 13, and we don't knowingly collect their data.
Changes and contact
If this policy changes, the date at the top changes with it. Questions go to gomezsj12@gmail.com.