Privacy Policy

1. Information we process

We process your email address, account and connection settings, sign-in credentials, session identifiers and the information you provide to support. Registration and security records may include timestamps and an IP-derived identifier. Hosting and mail servers may also record IP addresses, browser information and technical request details.

When you open your mailbox, our servers retrieve folder names, senders, recipients, subjects, timestamps and message contents from the mail server. Messages can contain personal information about you and other people. Connect only accounts you are authorized to access.

Mailbox security alerts

Stored mailboxes are checked approximately every two hours for new messages with the subject Your Epic Games account recovery request. This check reads message headers, not message bodies, and does not mark messages as read. When found, the mailbox address and matching subject are sent to the service operator through a Telegram bot. Existing messages are excluded when monitoring is initialized. Notification delivery records are kept to avoid repeat alerts. Contact support about this monitoring or removal of a stored connection.

2. Why we use this information

We use information to create mailboxes, authenticate users, display mail, keep sessions working, apply registration limits, investigate technical problems and respond to support or privacy requests. Where applicable, these activities support the service you request, service security and legal obligations. Optional tracking would require a separate, informed choice before activation.

3. Passwords and mailbox contents

Passwords used for stored KokoMail sign-in accounts are represented by hashes rather than a plain-text sign-in password. To connect stored mailboxes, the service also keeps the actual mail-server credentials in a form the server can use. Mail-server credentials are not protected in the same way as a one-way password hash.

KokoMail is not an end-to-end encrypted email service: its servers must access connected mailbox contents to display messages. Connections use HTTPS and certificate-verified encrypted mail connections, but no online service can guarantee complete security. Mailboxes created on our domains store their messages on the mail infrastructure used by KokoMail; connected external mailboxes remain subject to their own providers' practices.

4. Cookies and browser storage

The kokomail_session cookie keeps you signed in. Its browser lifetime is up to 30 days for a stored account or up to 8 hours for a direct session; signing out removes the cookie. The kokomail_admin cookie is used only for administrator access and lasts up to 8 hours. These are essential authentication cookies, not advertising cookies.

We save your banner choice in this browser's local storage under kokomail_cookie_preferences for up to 180 days. You can reopen the banner using Cookie settings in the footer or clear browser storage. Your choice is browser-specific and may disappear in private browsing or after you clear website data.

KokoMail does not currently load optional analytics or advertising cookies. Accept records your current choice; Decline leaves optional cookies disabled. Essential sign-in cookies remain available with either choice. If optional tracking is introduced, we will describe it and ask for a new choice rather than treating continued browsing as consent.

5. Service providers and disclosure

Information is processed by the hosting and mail infrastructure required to run KokoMail, and by your chosen external email provider when you connect an external account. These services may operate in different countries. We do not use mailbox contents for advertising and do not sell personal information through this service.

Authorized operators may access information when needed to maintain the service, investigate abuse or handle a support request. We may disclose information when required by applicable law or necessary to protect the service and its users. Links in messages may lead to third-party sites with their own privacy policies.

6. Retention and deletion

Stored account and mailbox data are retained while the account is provided, unless deleted as part of account administration or a verified deletion request. Session records include an expiry time; an expired session no longer authorizes access. Registration rate-limit checks use recent activity, and older registration-attempt records are cleaned during later registration requests.

There is currently no single automatic deletion period covering all technical logs, account records and backups. Backups may retain older copies until they are replaced or removed. Contact support to ask about retention or request deletion; deleting a KokoMail connection does not itself delete a mailbox hosted by an external provider. Deletion of a mailbox created with KokoMail must be requested explicitly.

7. Your requests and choices

Depending on the law that applies to you, you may have rights to request access, correction, deletion, restriction or a copy of your personal information, object to certain processing or withdraw optional consent. Send requests to support@kokomailmail.com and identify the account concerned. We may need to verify control of the account before releasing or deleting information; do not send passwords in a privacy request.

You may also have a right to complain to the relevant data protection authority. The scope of rights and any exceptions depend on applicable law; this policy does not promise rights, deadlines or regulatory coverage that do not apply to your situation.

8. Children and sensitive information

KokoMail is not designed to collect information from children who cannot independently consent to use the service under applicable law. A parent or guardian who believes a child has provided account information can contact support. Avoid sending unnecessary passwords or sensitive documents to support.

9. Changes and contact

We may update this policy as the service changes and will display the current revision date here. Material changes involving optional tracking will not be activated merely because you continue browsing. For privacy, account deletion or security questions, contact support@kokomailmail.com.