These terms describe the basic conditions for using privacy.fish.
Service model
privacy.fish provides privacy-first email access for users who prioritize privacy and security over convenience. The service is technical by design and relies on SSH / SFTP workflows.
There is no traditional webmail client. You download your email to one or more of your own devices.
Account access
An account includes one main privacy.fish address and unlimited email addresses across supported domains.
Account creation is manual. Newly paid accounts are created by administrators within 24 hours after payment is received.
Payment and refunds
A one-time payment unlocks access for the lifetime of the service.
Refunds are possible within one week of payment, except for cash and cryptocurrency payments.
Payment data is retained for only three months. After that, payment data can no longer be linked to your account.
Your responsibilities
You are responsible for keeping your SSH keys safe. Account recovery relies on backup SSH key pairs, not phone numbers or identifying information.
There is no other way to recover your account if you lose all usable keys.
You must not use the service for abuse, spam, fraud, harassment, malware distribution, or activity that violates applicable law.
Email storage and deletion
Emails cannot be stored permanently on privacy.fish servers. You must download your email, or it is automatically deleted after 14 days.
Backups are made hourly and kept for seven days. Deleted emails cannot be restored on request.
Security limitations
privacy.fish is designed to minimize retained data, trust, and attack surface. It cannot protect against lawful Norwegian court orders or other legally binding requests from Norwegian authorities.
The service may require explicit confirmation when sending to servers with invalid or expired TLS certificates.
Changes
These terms may be updated as the service develops. Material changes will be published on this page.
Questions about these terms can be sent to legal@privacy.fish .