MailboxhoundSign in

Privacy Policy

Last updated October 15, 2026

Mailboxhound (“we”, “us”) is a unified email inbox operated by Quill Hound at https://mailboxhound.com. This policy explains what data Mailboxhound accesses when you connect a Google or Microsoft email account, how it is used, where it is stored, and how you can remove it.

What we access

When you connect an email account, you grant Mailboxhound permission, through Google or Microsoft’s own sign-in screen, to:

  • Google: read, compose, send and organise messages in your Gmail account (gmail.modify), plus your email address and basic profile (openid, email, profile).
  • Microsoft: read and organise your mail (Mail.ReadWrite), send mail as you (Mail.Send), your basic profile (User.Read), and ongoing access while you are not using the app (offline_access).

How we use it

We use this access only to provide the features you use in Mailboxhound:

  • showing your messages from all connected accounts in one inbox, and searching them;
  • opening a conversation and its attachments when you click on it;
  • sending, replying to and forwarding messages when you press Send;
  • marking messages read or unread, starring, archiving and deleting them when you ask.

We do not use your email data for advertising, we do not sell it, we do not use it to train artificial intelligence or machine-learning models, and no person at Quill Hound reads your messages, except where you explicitly ask us to for support, where needed for security (such as investigating abuse), or where required by law.

What we store

  • A message index: for each message, its sender, recipients, subject, date, a short preview snippet supplied by Google or Microsoft, and its status (unread, starred, inbox, sent). This is what makes the combined inbox fast. By default it covers the most recent 90 days plus new mail.
  • We do not store message bodies or attachments. They are fetched from Google or Microsoft each time you open a message, shown to you, and not saved.
  • Access tokens that let Mailboxhound reach your mailbox. These are encrypted (AES-256-GCM) before storage and are never sent to your browser.
  • Your Mailboxhound login: your email address and a securely hashed password.

Where it is stored and who processes it

Data is stored in a Supabase (PostgreSQL) database hosted in the United States, and the application runs on Cloudflare. These providers process data on our behalf to host the service. We do not share your email data with anyone else, except where required by law.

Google API Services User Data Policy

Mailboxhound’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

  • Disconnecting an account in Mailboxhound’s Settings permanently deletes its index and its stored tokens immediately. For Google accounts we also ask Google to revoke Mailboxhound’s access.
  • You can also revoke access at any time from your Google Account or your Microsoft account (work accounts: myapps.microsoft.com). Mailboxhound then stops syncing that account.
  • To delete your Mailboxhound login and all associated data, email jglass@quillhound.com; we will do so within 30 days.

Security

All traffic uses HTTPS. Stored tokens are encrypted, database access is restricted per user, and email HTML is displayed in a sandbox that cannot run scripts.

Cookies

Mailboxhound uses your browser’s storage only to keep you signed in. We use no advertising or tracking cookies and no third-party analytics.

Children

Mailboxhound is not intended for anyone under 13, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above, and tell you in the app if the change is significant.

Contact

Questions or requests: jglass@quillhound.com.