privacyfish

0 Followers
32 Following
24 Posts
This is the official Mastodon account for https://privacy.fish, a private email service hosted in Norway. We focus on uncompromising privacy and data minimization. There is no webmail, no passwords and no IMAP or POP3. Access works only via SSH keys through our open-source client. All mail is age-encrypted with your SSH public key and automatically deleted after 14 days if not downloaded. We run no analytics, trackers or logs. All code is open source at github.com/privacy-fish.

Congrats on moving away from Outlook. That is a real step toward taking email privacy seriously.

Jurisdiction matters: where the provider is based, what privacy law applies, and how metadata/retention are handled. We wrote about why Norway is better than EU here: https://privacy.fish/blog/norway-email-privacy-law-why-it-beats-germany-switzerland-the-eu-and-us-for-private-email/

Our goal is to build the world’s most private email provider: no AI mailbox scanning, minimal metadata, short retention, local-first design. We are 1–2 months from launch and would genuinely value feedback! :)

Norway Email Privacy Law: Why It Beats Germany, Switzerland, the EU and US for Private Email

Norway email privacy law vs Germany, Switzerland, UK, Australia and US data retention: what Privacy.Fish must log under Ekomloven.

privacy.fish
This is such a real problem. A lot of “email safety” advice assumes the person can already inspect sender domains, distinguish browser vs mail app, and understand account-recovery flows. For parents/non-technical users, a safer default is often an allowlist of known contacts plus one trusted person reviewing anything involving payment, shipping, or account login — not “learn to spot every scam alone.”
@bsh Glad it helped. That compatibility-first check saves a lot of pain with email providers, especially when Thunderbird and mobile sync are part of the daily workflow.

For that mix I’d decide on the boring compatibility pieces first: Thunderbird IMAP/SMTP, CalDAV/CardDAV, custom domain support if you need it, and export paths if you leave later.

Posteo is usually the “simple, privacy-minded personal mailbox” choice. Mailbox.org is better if you want a fuller groupware setup. Proton is strongest if you are mostly inside its own apps, but I’d test the Bridge workflow carefully before choosing it for Thunderbird + Linux + LineageOS.

@thenewoil

The hard part is that kids don’t get a clean opt-out later. Parents are making a tiny archive of faces, routines, schools, friends, birthdays, locations… and those bits last longer than the context they were shared in.

We think about the same “ordinary data becomes identity data” problem with email too: receipts, school mail, doctor reminders, travel, recovery links. It is not dramatic until it has accumulated for years.

Yes. We wish more product teams treated “no” as a normal answer. Names, birthdays, phone numbers and extra emails often become permanent identifiers, not personalization. If the relationship is real, less data should be enough.

For a business address, I’d separate delivery reputation from provider lock-in.

If “not landing in spam” is the top concern, use a custom domain on a boring, established provider so you can move later without changing identity. Fastmail, Proton, mailbox.org, and Posteo are the usual short list I’d compare before going tiny-provider.

Germany winding down De-Mail is a useful reminder: secure email projects do not succeed just because they have legal backing or official branding.

For users, the hard parts are trust, daily usability, clear threat models, and what data still sits with the provider.

Private email should be honest about those tradeoffs instead of hiding behind a seal of approval.

https://www.heise.de/en/background/De-Mail-Delivery-Fiction-with-Pitfalls-11305293.html

De-Mail: Delivery Fiction with Pitfalls

By late 2026, the final legal step will be taken to withdraw De-Mail, a 2012 service. The system failed against reality.

heise online

@jik The “you can opt out in Settings” framing always bothers me. If a TV is generating viewing fingerprints, the control should be obvious at first-run and easy to find later, not buried under a privacy notice.

Most people don't buy a TV expecting it to behave like an adtech endpoint.

@ryan Since Capy is on your list: both FreshRSS and Miniflux should work with it, so I'd pick based on the server side rather than client support.

My bias would be Miniflux if you want boring/low-maintenance. FreshRSS if you want the nicer web UI, extensions, or more "kitchen sink" features. Either way I'd import an OPML and try it for a week before migrating your real reading flow.