Security

How we keep your list, and the people on it, safe.

• Only you can send to your list

  Mail to your list is forwarded only if it comes from your email address (or a delegate's) and passes the email industry's sender checks (DMARC and DKIM), which prove it really came from your email provider. Mail with a faked sender is dropped.

• Nobody is added without saying yes

  Everyone joins by accepting an invitation or confirming their own email (double opt-in). Invitations expire after 14 days, nobody is invited again after saying no, and "Never invite me" blocks invitations from every list.

• Recipients stay private

  Each person gets their own copy, addressed only to them. Nobody on a list sees who else is on it, and replies go to the sender, not to everyone.

• Leaving is easy, and only you can do it

  Every email has an unsubscribe link and the one-click unsubscribe button mail apps show. The link opens a page with an Unsubscribe button, so the programs some mail systems use to check links can't unsubscribe you by opening it. Each person's links contain a long random secret, so nobody can guess them to unsubscribe someone else.

• No passwords

  You sign in with a one-time link or code we email you, so there's no password to steal or reuse. A sign-in link works once, for 15 minutes. Before one is sent, your browser does a quick security check (a small puzzle, nothing to click), and each connection and email address can only ask for a few an hour, so nobody can flood an inbox or grab names in bulk.

• Your email stays yours

  i-subscribe forwards your email; nobody reads it or opens your attachments. Data is stored encrypted with a major cloud provider and sent over HTTPS. To find and fix problems, we record how this website is used with a session-recording service, including what's on the screen and what you type (the Privacy page lists everything it records). Other people's email addresses are hidden from those recordings, and sign-in codes and sign-in links are never recorded.

• Bad addresses and spam reports are handled for you

  Addresses that bounce stop being mailed, and anyone who reports a list's email as spam is taken off that list. This protects everyone's mail from being treated as spam.

• Limits that stop abuse

  A list can have up to 200 people and send 50 invitations a day, and one person's lists 200 together. Requests to join are limited too. Messages over 25 MB aren't sent.

• Delete anytime

  Delete a list, or your whole account, in Settings. It's removed from the service right away, and from logs and backups as they expire within weeks. We keep only a coded record of anyone who said no, so they aren't mailed or invited again.