Letterboxx
Download on the Mac App Store

Privacy, plainly.

Letterboxx is built to organize newsletters without collecting more data than we need. This page explains how the app and website handle information.

For Google sign-in and account access details, see the Google user data and protection section below.

What we collect

  • Website usage information may be measured with privacy-friendly Plausible analytics.
  • If you choose to share it, Letterboxx collects a small amount of privacy-preserving usage analytics to help us improve the app.
  • The app may process email content and account metadata only for accounts you connect.
  • Message data can be stored locally on your Mac so you can read, organize, and search it in the app.
  • We do not sell personal data or use ad-tracking networks on the site.

How we use data

We use data only to provide, secure, and improve Letterboxx, including rendering newsletters, importing newsletter copies from connected accounts, optional read-status exchange, and supporting features you choose to use.

Usage analytics

After you start a subscription or restore access, you can choose whether to share a small amount of privacy-preserving usage analytics. This helps us understand broad product patterns, such as whether people reach a particular step in setup or use a subscription option, and helps us decide what to improve.

We use TelemetryDeck to collect and aggregate this information. It includes an anonymized installation identifier, the event we define, the time of that event, and limited app and device metadata such as the app version, macOS version, and device type. We do not use it to identify you, follow you across apps or websites, advertise to you, or sell your information.

Newsletter content, email addresses, account names, account details, reading activity, search terms, credentials, and purchase receipts are never included in Letterboxx usage analytics.

You can choose Not Now when Letterboxx asks, or change your mind at any time: open Settings, choose General, and turn off Share usage analytics. This stops future analytics from being sent and does not change how Letterboxx works.

Google user data and protection

Letterboxx accesses Google user data only after you explicitly sign in with Google and grant permission. We use that access only for the app’s newsletter-reading and organization features:

  • Import newsletter copies from selected mail folders and display message content.
  • Organize messages, apply user actions, and support highlights, reminders, and privacy-focused reader controls.
  • Keep read/unread state local or exchange it with the mail account when the user enables that account option.
  • Process newsletter content primarily on the user’s device with local filtering and rendering that reduces scripts, trackers, embeds, autoplay media, and similar clutter.
  • Store derived privacy-analysis data and related classifier data locally on the device as rebuildable local state.
  • Do not sell Google user data, use it for advertising, or use it for unrelated profiling or data brokering.
  • Use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
  • Transmit Google user data over industry-standard encrypted connections and store authentication tokens with platform security mechanisms.
  • Limit access to the functionality required for Letterboxx to operate.
  • Allow users to revoke Google access through their Google Account permissions and remove their account from Letterboxx at any time.

Independent security assessment

Letterboxx completed an independent Cloud Application Security Assessment (CASA) for its Google API access. The assessment helps confirm that our app’s security controls are reviewed against recognized application security requirements, not just our own internal checklist.

  • Assessment type: Tier 2 (Lab Tested - Lab Verified).
  • Assessment performed by TAC Security, an independent third-party lab authorized by the App Defense Alliance.
  • Certification ID: 0d023e22.
  • Issued May 19, 2026; expires May 20, 2027.

Your choices

You can disconnect accounts through the app or revoke access at your email provider. You control what stays on your device and what you remove.

Contact

Questions about privacy can be sent to support@letterboxxsoftware.com.