Questions, answered straight.

Yes. No ads, no trackers, and we do not sell or share your data. We make no money from Elusive today. If we ever add a paid plan it will be for extra capacity or custom domains, never for privacy itself, and it will not take anything away from accounts that already exist.

At signup you get a one-time recovery code. It is the way back in if you forget your password, so save it somewhere safe. You can generate a fresh one any time from settings while you are logged in. If you lose both your password and your recovery code, your mail cannot be recovered. That is by design in end-to-end mode: we do not hold anything that could unlock it for you.

Three, and you can switch any time from settings. End-to-end is the default: your key is made in your browser and we cannot read your stored mail, but a recovery code can get you back in. Keyfile is the strictest: you keep the only copy of your key and we store none of it, so nothing is recoverable, on purpose. Server-managed is the convenient one: we hold the key and can read your mail at rest, which keeps recovery simple.

In end-to-end mode, which is the default, we cannot read your stored mail. One honest caveat: because Elusive receives standard email, an incoming message exists in plaintext on our server for the instant it takes to seal it to your key. Nothing is logged and it is never written to disk in that form. The full picture is on the security page.

Alongside your main address you can make as many as you want. Some are permanent, some are disposable and disappear after a set time or the moment they are opened. Group any of them under a persona like "shopping" or "forums" to keep the parts of your life separate.

Not yet. Custom domains are on the roadmap and will be the natural home for any future paid plan.

These are being built, not live yet. Attachments, importing your existing mail, and signed desktop and mobile apps are all on the plan. We would rather ship them properly than claim them early. When they land, this page changes.

Not right now, and we say so plainly. The code is closed for the moment and has not had an independent audit. That means you are trusting our claims for now. A published audit and a signed native client, which lets the code you run be checked, are the next things we want to earn that trust properly.

We do not log requests or the contents of your mail. What we do handle is delivery metadata, who a message is from and to and when, because routing email needs it. We never write that to a log either.

Against mandatory scanning of private messages, clearly. We wrote our position on the EU Chat Control proposal on its own page: On Chat Control.