Privacy
VampEmail, operated by Vampelium. Last updated 13 August 2026.
VampEmail is a mail service. Handling your mail means storing it, so this page says exactly what is kept, where, and for how long. It describes what the software actually does — if something here disagrees with the service, the page is wrong and should be corrected.
What is stored
| Data | Why | Where |
|---|---|---|
| Your account identifier, email address, username and display name | To know whose mailbox is whose, and to show your name on messages you send | Cloudflare D1. Supplied by your Vampelium account at sign-in; VampEmail never sees your password |
| Your VampEmail address | It is the address people write to | Cloudflare D1 |
| Messages you receive and send — sender, recipients, subject, body, timestamps | To show you your mail | Cloudflare D1 |
| The original bytes of every message, exactly as received | So a parsing mistake on our side never loses your mail | Cloudflare R2 |
| Attachments | So you can open them | Cloudflare R2 |
| Authentication results (SPF, DKIM, DMARC) recorded by Cloudflare | To show whether a sender is who they claim to be | Cloudflare D1 |
| A count of messages sent per hour | To stop one account spending the sending reputation everyone shares | Cloudflare D1, deleted after two hours |
| The outcome of sign-in attempts — which step succeeded or failed, and up to 400 bytes of what the account system replied when it failed | To diagnose sign-in problems. That reply is written by vampelium.com, and when a sign-in fails part way it can mention the account it was about | Cloudflare D1, deleted after seven days |
What is not stored
- Your password. Sign-in happens at vampelium.com and VampEmail is never shown it.
- Payment details. VampEmail does not take payments.
- Advertising or analytics identifiers. There are no third-party scripts on this site — none at all.
Remote images are blocked by default
An image loaded from a sender's server tells that sender the moment you opened their message, and from which network. VampEmail does not load them until you ask it to, per message.
Who else sees it
Cloudflare, because the service runs on their platform and your mail is stored there. Nobody else. Your mail is not sold, shared, or used to train anything.
Mail you send necessarily reaches the people you send it to, and passes through their providers. Mail is not end-to-end encrypted; it is encrypted in transit where the receiving server supports it, and at rest by Cloudflare.
How long it is kept
Your mail is kept until you delete it. Moving a message to Trash moves it; it is still there. Deleting your mailbox removes everything belonging to it — every message, every attachment, and the original copy of each message in storage.
That removal is not instant, and we would rather say so than round it up. The mailbox stops sending and stops accepting mail the moment you ask; the stored copies are then removed in batches over the following minutes, and the mailbox record itself goes last, once nothing is left that points at a file. Doing it in the other order would leave your attachments sitting in storage with nothing left that knows they are yours.
Taking a copy
Download my mail, next to your address, gives you a JSON file of your messages — including their text — your threads, and a list of your attachments. The attachment files themselves are not inside it; each entry names the address it can be fetched from while the mailbox exists. Nothing is behind a request form and nothing waits for a person to approve it.
Getting rid of it
Delete this mailbox, in the same place, does what it says. You type your address to confirm. Until the removal starts you can still stop it; once it has, you cannot, and the page tells you so rather than offering a button that would not work.
Signing out somewhere you no longer are
Sign out everywhere ends every session, this one included. A sign-in lasts seven days, and without this there would be nothing you could do about a session left open on a machine you no longer have.