Privacy Policy

Last updated: November 1, 2026

Satoshi Community is an independent project with no legal entity behind it; it is responsible for the data described here. Our rule is simple: we store only the data the service needs to work, for no longer than it needs it. We never ask for your name, phone number or another email address, and we never log your IP address.

Email is not private by itself

No email is secure unless it is encrypted end to end. Mail sent to your address reaches us in plain text; we forward it to your Nostr key encrypted, and keep nothing of its contents. Your replies are decrypted on our servers and sent as ordinary email through Amazon SES, which sees them the way any email provider would. For anything sensitive, ask your correspondent to encrypt it (with PGP, for example).

What we store, and for how long

• Your account: login, display name, a hash of your password (never the password), your two-factor secret (encrypted), your confirmed Nostr public key, your addresses, and, if you add them, your avatar and PGP public key. The PGP key is public: anyone can look it up on our keyserver. Kept while the account exists.
• Trusted devices: if you choose to trust a browser at sign-in, we keep a hash of the token it holds, a coarse name such as “Firefox on Linux” taken from the browser’s User-Agent (not the User-Agent itself), and when it was trusted and last used. Kept for 30 days, until you remove it, or until you change your password, authenticators or Nostr address.
• Payments: the plans you bought, their price in satoshis and their dates, and the invoice that paid them. A Lightning or Spark payment doesn’t tell us who you are. Kept for our records, also after the account is gone, without anything that links them to you.
• Conversations: to deliver replies to the right person, for each conversation we keep the other side’s email address, your address, the last subject and the last message id, until 90 days after the last message. When you reply, we keep who it went to and when for 30 days, to apply sending limits and never send it twice.
• Message contents: an incoming email is never stored by us; it is delivered and forgotten. What stays is the encrypted message itself on the Nostr relays it was published to, which only your key can open: our relay deletes it after 30 days, public relays keep it as long as they choose. A reply waits, encrypted, only until it is sent, then its text and subject are erased.
• Your correspondents’ Nostr identities: everyone who emails you gets a Nostr identity of ours, so you can reply to them. Its public profile shows their email address and is published on public Nostr relays. We hold its key; it is deleted after 90 days without use.
• Undeliverable addresses: an address that bounced or reported our mail as spam is kept indefinitely, so we never write to it again.
• Contact form: the name, contact details and message you send us, kept so we can follow up. Ask us and we delete it.
• IP addresses: the address you reach the site from is never logged and never written to disk. It is only counted in memory to stop abuse (for example, too many sign-in attempts), and those counters expire within 24 hours. When an email reaches us, our log records the address of the mail server that delivered it (your correspondent’s email provider, not a person), to trace spam and abuse.
• Server logs: technical events, without your IP address, message contents or who writes to whom. They are rotated by size, so older entries are overwritten as new ones arrive.
• Backups: our databases are backed up daily and each backup is kept for 14 days. Backups never include messages in transit.

When your account ends

Deleting your account in its settings, or its removal after a lapsed plan, erases your account data, conversations and avatar. Your login and addresses stay reserved for 365 days, so nobody else can receive mail meant for you; payment records stay, unlinked from you; and copies remain in backups for up to 14 days.

Who else handles data

• Amazon Web Services hosts our servers and sends your replies as email (Amazon SES).
• Breez and the Spark network process Lightning and Spark payments to our wallet.
• Nostr relays, ours and public ones, carry the encrypted messages between you and the service.

We don’t sell data, show ads, or use analytics or tracking cookies.

Your browser

Your session is kept in your browser’s local storage while you are signed in. The only cookie we set is the trusted-device one, and only if you ask for it at sign-in: it lets that browser skip the authentication code for 30 days. We set no other cookies.

Your rights

You can see and change your data in your account, and delete the account there at any time. To ask for a copy of your data, a correction or anything else about your privacy, under the LGPD, the GDPR or any similar law, write to us through the contact form, or over Nostr to nakamoto@satoshi.community, whose public key is npub1sdk7j3wafsjhrvhquvxv9hgjfy65xccc37anv9dnlay86x40vyaq9t86wx.

Changes

We may update this policy; the date at the top says when it last changed.