---
title: "Privacy & ownership"
description: "Privacy first is a claim every mail company makes, so here it is as a list of things you can go and check: what is stripped out of a message before you see it, what is never fetched on your behalf, and what happens to your mail when you stop paying us."
url: "https://nextmail.sh/docs/knowledge/trust"
area: "Knowledge base"
category: "Privacy & ownership"
---

# Privacy & ownership

Privacy first is a claim every mail company makes, so here it is as a list of things you can go and check: what is stripped out of a message before you see it, what is never fetched on your behalf, and what happens to your mail when you stop paying us.

## In this section

- [Tracking pixels stripped](https://nextmail.sh/docs/knowledge/trust/no-tracking.md): The invisible image that tells a sender you opened their mail is gone before you see the message.
- [Remote image control](https://nextmail.sh/docs/knowledge/trust/external-images.md): Stop a sender fetching anything from their own server while you read.
- [Choose which emails we send you](https://nextmail.sh/docs/knowledge/trust/email-preferences.md): Per-category switches in Account → Notifications, and the ones that matter are honestly marked as unswitchable.
- [Your mail on object storage](https://nextmail.sh/docs/knowledge/trust/storage.md): Full message bodies and attachment bytes on R2, indexed per mailbox.
- [Bring your old mailbox](https://nextmail.sh/docs/knowledge/trust/import.md): Bring the mail you already have: copy it straight from the old mailbox by signing in, or upload a Google Takeout export or an .mbox file, threaded and dated as it was.
- [Take your mail with you](https://nextmail.sh/docs/knowledge/trust/export.md): One download from the Export page with everything in it: every message and attachment as mbox files another mail app opens, plus your contacts, calendar, labels, rules, templates, notes and settings.
- [Transport encryption](https://nextmail.sh/docs/knowledge/trust/tls.md): Mail moves over TLS on the hops we run, and transport alone never turns the padlock green, because nothing on this backend can read the transport off a delivery.
- [Encryption at rest](https://nextmail.sh/docs/knowledge/trust/at-rest.md): Bodies, attachments and what you write are sealed before they are stored, so a copy of the database is ciphertext rather than mail.
- [End-to-end encryption](https://nextmail.sh/docs/knowledge/trust/e2ee.md): OpenPGP keys made in your browser. Mail you send to another Nextmail address can be sealed before it leaves the tab, and sealed mail addressed to you opens in the reading pane, decrypted on your machine. The keys are never ours to hand over.
- [Account security](https://nextmail.sh/docs/knowledge/trust/account-security.md): A code from your authenticator app on top of your password, and ten recovery codes for the day the phone is gone.