Cookie & Storage Policy
Last updated 2 October 2026Effective 26 September 2026
Summary
Viremail uses one cookie, to keep you signed in, and stores some data in your browser so the app works quickly and remembers your preferences. We do not use advertising, analytics or tracking cookies.
Because everything described here is strictly necessary to provide the service you ask for, or stays only on your device to support features you use, the Privacy and Electronic Communications Regulations (PECR) do not require us to ask for consent, so we do not show a cookie banner.
Cookies
| Name | Purpose | Type | Duration |
|---|---|---|---|
__Host-viremail( viremail.sid in development) | Keeps you signed in and protects against cross-site request forgery. Contains only a random session identifier. | Strictly necessary, first-party, HttpOnly, Secure | Until you close your browser, or, if you choose to stay signed in, until you sign out (400 days at most without a visit) |
Browser storage
This data stays in your browser. It is not sent to us automatically.
| Name | Where | Purpose |
|---|---|---|
viremail.settings | localStorage | Your display preferences (such as theme and density) |
viremail.contacts | localStorage | Recently used addresses, to suggest recipients as you type |
vm.lastEmail | localStorage | Pre-fills your email address on the sign-in page |
vm.lastPhoto | localStorage | Which background photo the sign-in page showed last, so you see a different one next time |
vm.recentSearches | localStorage | Your recent searches |
viremail.guestName | localStorage | The name you typed when you joined a call as a guest, so you do not have to type it again |
Other vm.*, viremail.* and vire.* keys | localStorage | Interface choices such as layout, zoom, sort order, open panels, calendar view, recent emoji and stickers, and dismissed notices |
vm.shared | sessionStorage | Remembers that you marked this device as shared, so nothing is kept offline |
vm.account | sessionStorage | Which of your signed-in accounts this tab is using |
viremail | IndexedDB | Offline copy of recent mail and unsent messages, and, if you unlock encryption on this device, your private key locked with a key that cannot leave this browser. Both are wiped when you sign out; nothing is kept on shared devices |
vm-office:… | IndexedDB | Offline copies of Write, Grid, Deck and Forms files you open, so they load and save without a connection. Not kept on shared devices. Clear them with your browser settings |
| Service worker caches | Cache Storage | App files (code, icons, styles) so the app loads quickly and works offline |
Third-party content
Fonts and default avatars are served from our own servers, so loading Viremail does not send your details to font or avatar providers. Images inside emails from other senders are blocked by default. GIFs in Pinglar load from KLIPY only when you use them, and KLIPY can see your IP address. Logos of authenticated senders (BIMI) are fetched by our server and passed on to you, so the sender doesn't see your IP address. See the Privacy Policy.
How to control storage
- Signing out removes the session, the offline mail copy and the saved encryption key.
- Choosing "shared device" at sign-in stops mail being stored offline.
- You can clear cookies and site data at any time in your browser settings. If you block the session cookie, you will not be able to sign in.
Contact
Questions? Contact us at [email protected].