Privado’s Email Relay (Aliases)

Last Updated: October 10, 2025

This Privacy Policy applies specifically to Privado’s Email Relay service. For our VPN and other services, please see our Privacy Policy located at https://privadovpn.com/privacy-policy/.

Privado’s optional Email Relay lets you receive email at one or more alias addresses that forward to your private email address. To provide the Relay, we process: (a) your forwarding address and alias mapping; (b) the original emails sent to your alias, including headers, subject, body, and attachments, so we can deliver messages, block email tracking pixels and known tracking mechanisms, and (optionally) show you the original, unaltered email; (c) delivery metadata (time received/forwarded, message size, delivery status); and (d) aggregated, non-identifiable statistics (e.g., number of tracking pixels blocked) for your dashboard and service integrity. We do not use Relay message content for advertising, profiling, or inference, and we do not sell or share Relay data for cross-context behavioral advertising. This service is not intended for users under 18.

Retention. Original emails are retained 30 days by default, then deleted, with backups purged within 30 days. Mapping and delivery metadata are retained while the alias is active and for 90 days thereafter for security and abuse prevention.

Security. Messages are encrypted in transit and at rest in our systems. We separate alias mapping from message storage, restrict access, and maintain audit logs.

Law enforcement. Our VPN service does not create logs of traffic content or destinations. For Email Relay, we may have limited data (including original messages within your retention window), which we disclose only when required by valid Swiss legal process or applicable international legal assistance treaties, after legal review and, where lawful, with notice to you. We challenge overbroad requests.

International transfers. If you choose a mailbox provider outside Switzerland, EEA, or UK, forwarding will transfer email content to that provider. We implement Standard Contractual Clauses where applicable and rely on GDPR Art.
49 derogations (necessary for contract performance or your explicit consent) strictly for your user-directed forwarding. Technical safeguards remain in place regardless of destination.

California residents. Email contents are Sensitive Personal Information under California law. We limit our use of this SPI to what is necessary to provide the Relay and security, do not use it to infer characteristics, and do not sell or share it as defined under CCPA/CPRA.