anon.li privacy & data

Email Address : Required for authentication, sending system notifications (e.g., verification, password reset, and magic links), and as the destination for forwarded emails.

We do not store full credit card numbers on our servers.

If you sign in with Google or GitHub, we receive your email address and basic profile (name and avatar) from that provider.

Session Metadata : Active login sessions include device metadata such as user agent so you can review and manage signed-in devices from your dashboard.

Analytics & product monitoring : We use PostHog (EU region) to understand aggregate usage and improve the product.

Metadata Logging : We temporarily log minimal metadata (sender address, recipient alias, timestamp) for a maximum of 7 days .

Provide the Service : Create aliases, forward emails, facilitate encrypted file sharing and form collection, run teams, and manage your account.

Process Payments : Handle subscriptions and billing through Stripe and, for cryptocurrency payments, NOWPayments.

Ensure Security : Monitor for abuse, prevent spam, enforce rate limits, and protect our infrastructure.

Metadata Logs : Automatically deleted after 7 days.

Form Submissions : Deleted automatically once they are older than your plan's retention window (30 days on Free, 90 days on Plus, 365 days on Pro and Business)

Backups : Rolling backups are retained for up to 30 days for disaster recovery purposes.

Your information may be processed in countries other than your own, primarily the United States and the European Union.

Standard Contractual Clauses (SCCs) approved by the European Commission

Adequacy decisions where applicable

The same list is maintained at anon.li/sub-processors .

When you delete your account, your personal aliases, recipients, domains, Drops, Forms and their submissions, files, API keys, sessions, credentials, vault materials, and the account record are removed from live systems immediately

Access : Request a copy of your personal data.

Portability : Export your data in a machine-readable format.

Correction : Update inaccurate information via your dashboard.

Deletion : Delete your account and all associated data at any time.

Restriction : Request limitation of processing in certain circumstances.

Objection : Object to processing based on legitimate interests.

Withdrawal : Withdraw consent at any time where processing is based on consent.

We do not use your information for advertising, sell it, or share it with third parties for their own purposes.