PRIVACY · 2026-08-25

Minimal data, only for delivery.

We process an email address only to confirm and send the alerts you request. The address is encrypted with AES-GCM. A separate HMAC-SHA256 value supports private lookup and deduplication. Raw addresses are not written to application logs, health responses, or operational artifacts.

What we keep

• A random subscriber ID, one-way email lookup hash, subscription status, and consent or opt-out timestamps.
• A versioned encrypted address only while a subscription is pending or active.
• Alert delivery receipts and provider event IDs without provider payloads or recipient addresses.
• A one-way IP hash on the subscription consent event. The raw IP is used transiently for abuse prevention.

Deletion and suppression

Unsubscribe, hard bounce, complaint, or provider suppression immediately clears the encrypted address. The one-way lookup hash and minimal consent/opt-out record remain to enforce the request and prevent unsafe redelivery. Unconfirmed requests expire after 24 hours and their encrypted address is cleared.

Processors and transfers

Cloudflare provides the Worker, D1 database, Queues, Turnstile, and Email Service. Inbox providers process the message to deliver it. We do not sell the address, load analytics or advertising on this site, or use click/open tracking.

Transactional-only delivery

This email stream never carries sponsored, affiliate, advertising, or promotional content. Messages are not personalized, and we use no tracking pixels or click-tracking redirects.

Your choices

Every alert includes a visible unsubscribe link and RFC 8058 one-click unsubscribe headers. Unsubscribing stops all email from this service. For privacy questions, email hello@codex-reset.com.