Security & Trust

How your mail is protected, and why you are never locked in.

Encryption in transit

Every protocol — webmail, IMAP, POP3, SMTP, calendar and contact sync — runs over TLS. We publish MTA-STS so other providers know to require TLS when delivering to you, monitor TLS-RPT reports for downgrade attempts, and verify DANE certificate pins when sending to providers that publish them.

Sender authentication

All outgoing mail is DKIM-signed, with SPF and DMARC records generated for every domain. Incoming mail is verified against the sender's SPF, DKIM and DMARC; spoofed mail is quarantined, and legitimately forwarded mail is recognized through ARC (the standard Gmail and iCloud use). Mail we forward on your behalf is ARC-sealed so it keeps authenticating downstream.

Account security

Passkeys (Face ID, fingerprint, security keys) for phishing-resistant sign-in.
Two-factor authentication (TOTP) and per-device app passwords for mail clients.
Session management and a login history you can review, with failed attempts throttled and logged.

Reading privacy

We sell mailboxes, not attention: no advertising, no profiling of your mail. The reader removes tracking pixels (and tells you it did), loads remote pictures through our privacy proxy so senders never see your address or when you opened a letter, strips tracking parameters from links, and warns you plainly when a message fails sender verification or carries a risky attachment.

Encrypted mailboxes

Optionally, a mailbox can be end-to-end encrypted: a key pair is generated in your browser, the private key is locked with a passphrase only you know, and message bodies and attachments are sealed the moment mail arrives. Sealed mail is unreadable to us — support cannot recover it if the passphrase is lost, which is the point.

For businesses with obligations

Domains can enable compliance journaling (an archive copy of every message in and out), retention policies, legal hold (archives become undeletable until the hold is lifted), and e-discovery search across all mailboxes — with every administrative search and export written to an audit log.

Your data is yours

Everything speaks open standards — IMAP, POP3, CalDAV, CardDAV, Sieve — so any client works and any competent provider can take over.
One-click full export from webmail settings (mail as standard .eml in a zip, contacts as CSV, calendar as a standard feed).
We migrate you in from any IMAP host — and the same openness means you can leave the same way. No exit fees, no proprietary formats.
On termination, your domain's data is deleted after a grace period. See the Privacy Policy.

Where your data lives

The service is operated and supported from Dhaka, Bangladesh. Mail is stored on durable, replicated object storage, encrypted at rest by the storage layer. For organizations with data-residency requirements, the same software can be deployed on dedicated infrastructure hosted entirely in-country — talk to us.

Questions

support@linkedpool.com · See also Reliability and the live status page.