Privacy and data protection
Privacy Policy
Effective and last updated: August 5, 2026
1. Scope
This Policy explains how JGAMail collects, uses, discloses, retains and protects information when people visit the website, create an @jgamail.com account, send or receive email, submit recovery or privacy requests, or contact support. It applies to account holders, recipients, website visitors and authorized agents.
2. Information collected
| Category | Examples | Purpose |
|---|---|---|
| Account identifiers | Name, JGAMail address, alternate recovery email, role, age attestation | Create, verify, administer and recover accounts. |
| Credentials and security | One-way password hash, MFA secret encrypted at rest, recovery-code hashes, sessions, login activity, device/browser, approximate country and IP security records | Authenticate users, detect abuse, secure accounts and investigate incidents. |
| Mailbox content | Messages, headers, sender/recipient details, attachments, drafts and folder state | Provide email, spam/security review, user-requested support and lawful processing. |
| Usage and preferences | Cookie choices, GPC signal, privacy requests, blocked senders, settings | Honor choices, operate the service and maintain evidence of compliance. |
| Support/legal records | Reports, correspondence, copyright notices, law-enforcement requests and incident records | Protect users, enforce policies, comply with law and defend legal claims. |
3. How information is used
- Provide, secure, maintain and troubleshoot email and account services.
- Verify account creation through an alternate email and process password resets.
- Route inbound and outbound email, store messages, scan or block dangerous attachments, limit spam and detect compromised accounts.
- Respond to privacy, accessibility, abuse, copyright, support and lawful government requests.
- Maintain audit, consent, retention, incident and security records.
- Send transactional notices and optional product communications where permitted.
4. Disclosure
Information may be disclosed to listed service providers that process it under contract; to recipients and sending/receiving mail systems as necessary to deliver email; to professional advisers; in a business transaction subject to appropriate protections; to protect rights and safety; or in response to valid legal process. JGAMail does not sell mailbox content. JGAMail does not use message content for targeted advertising.
5. State privacy rights
Depending on residence and applicable law, a person may have rights to know/access, correct, delete, obtain a portable copy, opt out of sale or sharing, opt out of targeted advertising, limit certain sensitive-data uses, use an authorized agent and appeal a denied request. Submit requests through the Privacy Choices page. JGAMail will verify identity proportionately and will not discriminate for exercising a legal right.
6. Global Privacy Control
JGAMail treats a recognized Global Privacy Control browser signal as an opt-out of optional sale, sharing and targeted advertising for that browser. Optional analytics and marketing choices are disabled when the signal is detected.
7. Retention
Retention depends on the record and legal need. Mailbox content remains until the user deletes it, the account is deleted, or a documented legal/security hold applies. Trash and spam are scheduled for deletion after 30 days by default. See the Data Retention Policy.
8. Security
JGAMail uses encryption in transit, encryption at rest where supported, one-way password hashing, secure cookies, MFA, access controls, logging, rate limits, attachment controls and incident procedures. No system is guaranteed secure. Report suspected vulnerabilities to [email protected].
9. Children
JGAMail is not offered to children under the configured minimum age, which is currently 18. JGAMail does not knowingly create accounts for children under 13. Reports involving child exploitation are escalated under the Child Safety Policy.
10. Changes and contact
Material changes will be posted with a new effective date and, where required, additional notice or consent. Questions and requests: [email protected]; mailing address: NOT CONFIGURED.