Legal
Cookie Policy
Last updated: 2026-05-15
newmail.click uses a small number of strictly necessary cookies to run the Service. We do not use advertising, profiling or third-party analytics cookies, so we do not show a consent banner.
Cookies we set
- next-auth.session-token — keeps you signed in after you authenticate with Google. Expires after 30 days or when you sign out.
- next-auth.csrf-token — protects sign-in forms against cross-site request forgery. Session lifetime.
- __stripe_mid / __stripe_sid — set by Stripe on the checkout page to detect fraud. Only present while you are on a Stripe checkout page initiated from newmail.click. See Stripe's cookie policy.
Signature tracking
Pro signatures embed a tracking pixel and rewrite outbound links through /r/ redirects. These do not set cookies on the recipient's browser; they record server-side events only (timestamp, hashed identifier, country, user agent).
Controlling cookies
You can clear cookies at any time from your browser settings. If you clear the session cookie you will be signed out.
Contact
Questions: [email protected].