Privacy note.

A little clarity about this corner of the internet.

LAST UPDATED · 25 OCTOBER 2026

Your account

Saltwind Post collects the name, contact email, invitation source, application status, review notes, and account dates needed to operate this invitation-only service. Password creation and verification are handled by Supabase Auth through our server. Business data is stored in Supabase PostgreSQL with access policies. Existing passwords can be migrated by importing the original hash through a controlled, server-side process. Passwords are never stored in plaintext. Please use a unique password.

Sessions and verification

Necessary secure cookies maintain your signed-in session and help protect account requests from cross-site forgery. Session cookies are HttpOnly; authentication tokens are not stored in local storage. Time-limited verification and recovery links are sent to your contact email through the configured transactional email provider. Cloudflare Turnstile may process technical browser information to help prevent automated abuse.

Applications and mailbox allocation

Applications are reviewed by an administrator. Your contact email, review record, invitation source, and mailbox allocation are visible to authorized administrators. Approval does not automatically create a mailbox. If one is assigned, its address and provisioning status are recorded in your account. Your Saltwind Post account password is separate from your Spacemail mailbox password.

Letters and drafts

This workspace does not read your mailbox or send your draft messages through IMAP or SMTP. Account emails use the separately configured SMTP service. No simulated inbox is displayed. Drafts you explicitly save are stored in your Saltwind Post account and are available only through authenticated, account-scoped requests. They are not sent as mail. Actual mailbox messages and mailbox credentials are handled by Spacemail under the provider’s own terms and privacy information. The mailbox entrance opens the external provider in a new tab.

Visits and security records

The platform records page views and daily visitor estimates. A daily keyed value derived from trusted network information and a browser summary supports the visitor estimate; it is an estimate, not a verified count of individuals. Security records can include trusted source IP information, available country metadata, browser summaries, event times, account identifiers, outcomes, administrator actions, and security-email delivery results. Security alerts are sent to the designated administrator. Passwords, authentication cookies, and MFA codes must not be included in alert messages or event logs.

Providers

Cloudflare Pages delivers and protects the website and its account gateway, and may maintain its own technical logs. Its processing is described in Cloudflare’s privacy policy. Supabase Auth processes account email addresses, passwords and authentication records; see Supabase’s privacy policy. Spacemail SMTP delivers verification, recovery and configured notification emails. SMTP credentials are held in provider settings, never in browser code. Spacemail is responsible for its own mailbox service; refer to the provider’s privacy information before using it.

Control and retention

You can update your display name and change your account password. Contact your administrator to request access to your account information, correction of your contact address, or deletion of your account and saved drafts. Records necessary for security, abuse prevention, or a legal obligation may need to be retained. The operator should apply a documented retention schedule appropriate to the service; this site does not promise a retention period it has not implemented.

Questions

For account or privacy requests, contact [email protected]. Please do not include passwords, verification tokens, or authenticator setup keys in correspondence.