Privacy policy

In short

• Peep has no account with us. You don't sign up, and we don't know who uses it.
• Your mail never comes to us. The apps and Peep Web talk to your mail provider directly, or to your own Peep server (or your company's Peep Enterprise server). Nothing goes through peep.moe.
• No tracking, no ads, no analytics in the apps. They don't report usage, crashes or anything else to us. If you installed Peep from the Mac App Store and chose to share with app developers in your Mac's settings, Apple may pass us anonymous crash reports and usage statistics. Peep itself sends nothing.
• This website keeps simple visit counts from its server logs. No tracking scripts, no advertising cookies.

Peep is made by Justin B Smith (Smith Grown), the "we" in this policy.

The Peep apps and Peep Web

Peep for Windows, Mac, Linux and Android, and Peep Web on your own server, keep your information on your own devices and your own server. We can't see any of it.

• Mail stays with your mail provider. Peep keeps copies on your computer, phone or Peep server so it can show them quickly and offline.
• Mailbox passwords are encrypted on the device or server that saved them: with Windows DPAPI; with a key kept in the Mac Keychain, the Android Keystore, or your Linux keyring (or, where no keyring runs, a key file only you can read); and with AES-256 on a Peep server. Linked devices don't receive the server's mailbox passwords at all.
• Settings, contacts, calendar, tasks, notes and rules are stored locally, and synced only between your own devices and your own Peep server.
• Encryption keys for OpenPGP and S/MIME stay on your Peep server.
• Backups are files you make, sealed with your passphrase, and kept wherever you choose.

Whoever runs a Peep Web server, you or someone you trust, is responsible for it and for the data on it.

Who Peep talks to

Besides your own devices and your own Peep server (or your company's Peep Enterprise server), Peep connects only where it needs to, and never to peep.moe (the "peep.moe" link in About just opens this website in your browser):

• Your mail providers, to read and send your mail (IMAP and SMTP).
• Microsoft, when you sign in an Outlook.com, Hotmail or Microsoft 365 mailbox. Peep keeps Microsoft's sign-in token, not a password.
• Senders' image servers, only when you choose to load remote pictures in a message. Pictures are off until you allow them, because they can tell the sender you opened the mail.
• Key lookups on a Peep server with encryption: when you write to someone new, Peep Web may look up their public key at their domain (Web Key Directory) and then at keys.openpgp.org. That lookup reveals the address being looked up to those services.

This website

• Cloudflare delivers and protects peep.moe, so it handles your connection, including your IP address.
• Google Fonts: the pages load their fonts from Google, so your browser contacts Google for them.
• Server logs: our web server records each request: your IP address, the page, the time, the referring page and your browser's name. We use these to keep the site running and to count visits and downloads.
• Visit counts: our own statistics page reads those logs and keeps a scrambled visitor ID (a one-way hash of your IP address and browser, with a secret only our server knows), your country as reported by Cloudflare, the page, the referring site, and your device and browser type. It doesn't keep your IP address, and it isn't shared with anyone.
• Cookies: none for tracking or advertising. Your light or dark choice is remembered in your own browser.

Email, donations and the demo

• Email: if you write to [email protected], we keep your message and address to reply and to follow up on bug reports. Please don't send passwords, PINs or private mail.
• Donations go through PayPal, which handles your payment details under its own privacy policy. We see only what PayPal shows us about the donation, such as your name, email address and the amount.
• The live demo runs in a temporary sandbox with made-up mailboxes. It sends no real mail, and what you do there is cleared when the sandbox resets.

How long we keep it

• Web server logs: about a month, then they're deleted as the logs rotate.
• Visit counts: kept for the site's statistics, in the scrambled form described above.
• Email: as long as it's useful for the conversation or the bug it's about.
• Donation records: as long as tax and accounting rules require.

We don't sell your information, and we don't use it for advertising.

Your choices

• The apps and Peep Web keep everything on your devices and your server, so you can see, export or delete it yourself at any time: uninstall the app, delete its data folder, or delete your Peep Web data folder.
• To ask what we hold about you from this website or your emails, or to have it deleted, email [email protected]. We'll reply within 30 days. Depending on where you live (for example California, the EU or the UK), the law may give you more rights, and we'll honor them.
• Peep and peep.moe aren't meant for children under 13, and we don't knowingly collect their information.

Changes and contact

If this policy changes, we'll post the new version here with a new effective date. Questions go to Smith Grown at [email protected].