Terms of Service

The agreement between you and Inpriv when you use Inpriv Mail, Inpriv Temp or Inpriv ID.

Effective 22 October 2026

1. The agreement
2. The services
3. Who can use Inpriv
4. Your account
5. Encryption and lost passwords
6. Rules
7. Your content
8. Limits and changes
9. Ending your use
10. Open source
11. No warranty
12. Limitation of liability
13. Indemnity
14. Law and disputes
15. Changes to these terms
16. Contact

1. The agreement

These terms, together with the Privacy Policy, the Acceptable Use Policy and the Copyright policy, form the agreement between you and the operator of Inpriv ("Inpriv", "we", "us"). By creating an account or using any Inpriv service, you accept them. If you don't agree, don't use Inpriv.

2. The services

• Inpriv ID (id.inpriv.xyz): your account and your @inpriv.xyz address, with optional two-factor authentication.
• Inpriv Mail (mail.inpriv.xyz): a mailbox. Mail between Inpriv users is end-to-end encrypted in your browser, and your keys are locked with a mailbox passphrase only you know. If you lose that passphrase, nobody can recover the mail encrypted to your keys. Mail to and from other providers travels as normal email and is described in the Privacy Policy.
• Inpriv Temp (temp.inpriv.xyz): a disposable inbox that only receives mail, isn't encrypted, and is deleted after 24 hours.

The services are currently free. If we ever introduce paid features, they'll come with separate terms that you'd have to accept first.

3. Who can use Inpriv

You must be at least 16, and old enough to agree to these terms where you live. You can't use Inpriv if the law forbids you from doing so, or if we've closed an account of yours for breaking these terms.

4. Your account

• Choose a username that doesn't impersonate anyone or mislead people (for example, by pretending to be Inpriv staff or another organisation). We may reclaim or refuse usernames that do.
• Keep your password, two-factor codes and recovery codes safe. You're responsible for what happens under your account. If you think someone else has access, change your password and write to support@inpriv.xyz.
• Don't sell, rent or transfer your account or address.
• Usernames and addresses are permanent. A deleted address isn't reassigned, so nobody can receive mail meant for you.

5. Encryption and lost passwords

Your mailbox private key is protected by your password, in your browser. We never have your password or your private key. That means:

• we can't reset your password in a way that restores your mail. If you lose your password, encrypted mail can't be decrypted again, by you or by us.
• When you change your password on Inpriv ID, Mail asks for your previous password once (or uses this device's "Skip master password" key) to re-lock your key. Without either, existing encrypted mail stays locked.
• Encryption protects message bodies. It doesn't hide who you write to, subject lines or times; the Privacy Policy says exactly what's visible.

6. Rules

Use Inpriv lawfully and in line with the Acceptable Use Policy. In short: no spam, phishing, malware, fraud, harassment, child sexual abuse material, infringement or attacks on the service.

We may investigate suspected breaches using the data described in the Privacy Policy. Message bodies we can't read stay unreadable to us.

7. Your content

You keep all rights in what you send and store. You give us only the permission we technically need to store, transmit and display it to you and your recipients, to run the service. You're responsible for your content, and for having the right to send it.

8. Limits and changes to the services

We set limits to protect the service: sign-in and sign-up rate limits, message sizes, sending limits, and how long Temp inboxes last. They may change. We may change, suspend or retire features or whole services. When we retire something that holds your data, we'll give reasonable notice, so you can save what you need, unless that's impossible (for example, for legal or security reasons).

9. Ending your use

• You can stop at any time and delete your account in your account settings on id.inpriv.xyz. That deletes your Inpriv ID, your mailbox and its mail. Access-log entries are kept for up to 30 days (90 for entries written before 22 October 2026), and your address is never given to anyone else, as described in the Privacy Policy.
• We may suspend or close an account, or block an address, that breaks these terms or the Acceptable Use Policy, puts the service or others at risk, or where the law requires it. Where it's appropriate and safe, we'll tell you why. Serious abuse, such as phishing, spam or illegal content, may be closed without notice.

Sections 7 and 10–16 continue to apply after your use ends.

10. Open source

Inpriv's code is published under the MIT License at github.com/Inpriv/inpriv. That license covers the code. These terms cover your use of the services we run. The Inpriv name and logo identify our services; don't use them in a way that suggests a fork or another service is ours.

11. No warranty

Inpriv is a small service provided "as is" and "as available". To the extent the law allows, we make no promises, express or implied, about availability, fitness for a particular purpose, or that the service will be error-free, uninterrupted or secure against every attack. Mail can be delayed, rejected by other providers, or lost. Keep your own copies of anything important.

12. Limitation of liability

To the extent the law allows, we aren't liable for any indirect, incidental, special or consequential damages, for lost profits or data, or for damages caused by things outside our reasonable control (including failures of Cloudflare, Resend or other networks). Our total liability for all claims about the services is limited to the greater of what you paid us in the 12 months before the claim (currently nothing) or EUR 50.

Nothing in these terms limits liability that can't be limited by law, such as for intent, gross negligence, or death or personal injury caused by negligence, or your mandatory rights as a consumer.

13. Indemnity

If you break these terms or the law while using Inpriv, and that causes a claim against us by someone else, you'll cover our reasonable costs of that claim, to the extent the law allows. This doesn't apply where we caused the problem.

14. Law and disputes

These terms are governed by the laws of the country where the operator of Inpriv is established, without regard to conflict-of-law rules. If you're a consumer, you also keep the protection of the mandatory laws of the country where you live, and you can bring a claim there. Before going to court, please write to legal@inpriv.xyz; most problems can be solved by email.

If any part of these terms can't be enforced, the rest still applies. If we don't enforce a term right away, we haven't given it up.

15. Changes to these terms

We may update these terms. For significant changes, we'll give notice on the site at least 14 days before they take effect, unless a change is needed sooner for legal or security reasons. If you keep using Inpriv after a change takes effect, you accept it. If you don't, delete your account. Every version is public in the source repository.

16. Contact

Account help: support@inpriv.xyz. Legal questions: legal@inpriv.xyz. All contacts are on the Legal page.