Privacy

Cookie policy

Every cookie and every item of browser storage Rykon Mail uses, and why there is no consent banner.

Version
1.0
Effective
30 October 2026
Last updated
30 October 2026

  1. 1.In short

    1.1

    Rykon Mail uses three cookies, all strictly necessary to sign you in and keep you signed in, and a few items of browser storage that remember choices you made, such as light or dark appearance. We use no analytics, advertising, social media or other third-party cookies, pixels or scripts on our websites or in the consoles.

    1.2

    Under the EU ePrivacy rules, the UK PECR and the GDPR, storage that is strictly necessary for a service you asked for, or that only remembers a choice you made, does not require consent. That is why Rykon Mail does not show a cookie banner: there is nothing to consent to.

  2. 2.Cookies

    2.1

    These are set only when you sign in to a console. Browsing the marketing site, the documentation or the status page sets none.

    • Name

      __Host-rykonmail_session

      Type
      Cookie, strictly necessary
      Purpose
      Keeps you signed in to the console. Encrypted and signed so it cannot be read or altered; HttpOnly, Secure, SameSite=Lax and limited to the one host that set it
      Lifetime
      12 hours, or until you sign out
      Set on
      app.rykonmail.com and admin.rykonmail.com

    • Name

      __Host-rykonmail_oidc

      Type
      Cookie, strictly necessary
      Purpose
      Holds one sign-in attempt (its state and verifier) while you are at the sign-in page, so the answer can be checked as yours. Encrypted, HttpOnly, Secure
      Lifetime
      10 minutes, cleared when sign-in finishes
      Set on
      The host you sign in from

    • Name

      rykonmail-account

      Type
      Cookie, strictly necessary
      Purpose
      Remembers which account you are working in when you belong to more than one. Holds only an account identifier; HttpOnly
      Lifetime
      1 year
      Set on
      app.rykonmail.com

  3. 3.Browser storage

    3.1

    These are kept in your browser’s local storage. They never leave your device and are not sent to our servers.

    • Name

      rykonmail-theme

      Type
      Browser storage, preference
      Purpose
      Your choice of light or dark appearance. Absent when you follow your system setting
      Lifetime
      Until you change it or clear your browser
      Used on
      Every Rykon Mail site

    • Name

      rykonmail-nav

      Type
      Browser storage, preference
      Purpose
      Whether the console sidebar is folded
      Lifetime
      Until you change it or clear your browser
      Used on
      The console

    • Name

      rykonmail-preview-appearance

      Type
      Browser storage, preference
      Purpose
      Whether the email preview in the editor shows the light or dark version
      Lifetime
      Until you change it or clear your browser
      Used on
      The console

    • Name

      rykonmail-pane-<name>

      Type
      Browser storage, preference
      Purpose
      The width you dragged an editor pane to
      Lifetime
      Until you change it or clear your browser
      Used on
      The console

    • Name

      rykonmail-docs-lang

      Type
      Browser storage, preference
      Purpose
      The programming language you chose for code samples in the documentation
      Lifetime
      Until you change it or clear your browser
      Used on
      The documentation

    • Name

      rykonmail:<form id>

      Type
      Browser storage, functional
      Purpose
      On a website that embeds a customer’s pop-up sign-up form: that the visitor closed it or signed up, so it is not shown again. Holds no personal data and is never sent to us
      Lifetime
      The period the customer chose for the pop-up, or permanently after a sign-up, until the visitor clears their browser
      Used on
      The customer’s own website

  4. 4.Sign-in and webmail

    4.1

    Signing in takes you to our identity service at id.rykonmail.com, and webmail is at mail.rykonmail.com. Both are run by us, and set their own strictly necessary session and security cookies while you use them. They set no tracking cookies.

  5. 5.Sign-up forms on customers’ websites

    5.1

    A customer can place a Rykon Mail sign-up form on its own website. The form and its script set no cookies. A pop-up form remembers in the visitor’s browser that it was closed or used, so it is not shown again. Spam protection is a small calculation done by the visitor’s browser, not a third-party CAPTCHA.

    5.2

    If the customer’s own website uses a tag manager, the form script announces a completed sign-up to it, so the customer can measure its own forms. What happens next is under the customer’s control and its own cookie policy; Rykon Mail receives nothing from it.

  6. 6.Email opens and clicks

    6.1

    Email does not use cookies. Campaign and automated emails sent through Rykon Mail record opens when images load and clicks through links that pass through Amazon SES, on behalf of the customer that sent them. The unsubscribe link is never tracked. See the privacy policy.

  7. 7.Your control

    7.1

    You can delete cookies and local storage in your browser settings at any time. Deleting the session cookie signs you out; deleting preferences resets them. If we ever add a cookie that is not strictly necessary, we will update this page first and ask for your consent before setting it.

Change log

  1. Version 1.0
    30 October 2026

    First published, listing every cookie and storage item found in the code.