Privacy — what we log
Veil is built so that we cannot betray you, because we never hold anything to betray. Here is exactly what happens to your data — and how you can verify every claim yourself.
What we store, and what we don't
✓ No readable email
Every message is encrypted to your personal key the moment it arrives. We store only ciphertext. Without your password the contents are mathematically useless — even to us, even under a court order.
✓ No password on disk
We never store your password. It exists in memory only for the instant it unlocks your key, then it is gone. There is no hash for anyone to crack offline.
✓ No IP or access logs
We do not record your IP address, your device, or when you connect. There is no access log to hand over, because it is never written in the first place.
✓ Sessions in memory only
Your login session lives purely in RAM and is never written to disk. A restart logs everyone out; a powered-off server reveals nothing about who was online.
✓ Encrypted at rest
If the server is seized while switched off, the database holds only ciphertext. There is no master key sitting on disk that could unlock your mail.
Don't trust us — verify
Veil is fully open source. You can read the exact code that stores your mail, derives your key, and refuses to log you. The encryption uses audited, standard building blocks (Argon2id, X25519, XChaCha20-Poly1305). Compile it yourself and compare — that is the only guarantee worth having.
OSINT search (IntelX)
Our OSINT search is powered by a specialised external intelligence provider, so you get professional-grade results without us ever building a profile of you. When — and only when — you run a search, that single query is forwarded to the provider and is handled under their systems, which we do not operate. We deliberately keep this feature completely separate from your mailbox: your mail stays zero-access and is never shared with anyone. The search is entirely optional — if you never use it, nothing ever leaves Veil.