Privacy at BC10 Mail
Last updated 12 October 2026
BC10 Mail is made by BrandCode10 (“we”, brandcode10.com). It is built so that your email stays between you and your mail provider. This page explains, in plain language, exactly what is stored where, what our servers receive, and what they never see.
The short version
- Windows app: your mail is stored only on your PC, encrypted. The app connects directly to your own mail servers.
- Read tracking: our tracking service learns when a tracked message is opened or a tracked link is clicked. It does not receive message content, subjects or email addresses, and it does not store IP addresses.
- Web app: runs as a guest session. Your sign-in and mail are held in memory only while you use it, and nothing is kept after you sign out.
- This website: no cookies, no analytics, no advertising and no third-party scripts.
- We do not sell data, show ads or use your mail to train AI models.
1. The Windows app
What stays on your PC
Everything the app needs to work offline is kept in your Windows user profile (%APPDATA%\BC10 Mail):
- Your messages, folders, attachments you opened, drafts, contacts suggested from your own sent and received mail, and your settings, rules, templates, signatures and snoozed items.
- The read-tracking events for mail you sent (when and how each recipient’s message was opened).
- If you use AI features: cached summaries, labels and the search index built from your mail.
The mail database is encrypted at rest (SQLCipher), and so is the attachment cache (AES-256-GCM). The encryption key, your mail passwords or sign-in tokens, AI keys and S/MIME / PGP private keys are protected by Windows (DPAPI and the Windows credential store) and never leave your PC. An optional app lock (Windows Hello or a PIN) keeps the app closed to anyone else at your desk.
Who the app talks to
- Your mail providers (for example Gmail, Microsoft or your company’s server), directly over encrypted connections, to fetch and send your mail.
- Our tracking service, only if read tracking is on (see section 2).
- Our update feed (
track.brandcode10.com/updates): the app asks for the latest version number a few times a day. This is an ordinary web request that contains no personal data. - Crash reports (on by default, can be switched off in Settings → Security and privacy): technical details of a crash, the app and Windows version and a random install id. Addresses, subjects, file names, account names and server names are removed before anything is sent, and mail content is never included. Reports go to our error-monitoring provider (Sentry), and builds without a reporting address send nothing at all.
- Usage statistics (off by default): if you turn them on, one anonymous summary of which features were used, as counts, at the end of a session.
- An AI provider of your choice, only if you add your own key (Anthropic, OpenAI, Google Gemini or a compatible service). When you ask for a summary, reply or translation, the relevant message text goes directly from your PC to that provider under its terms. AI features are off for business domains until you switch them on, and nothing is sent until you ask.
- Plugins you install can only reach the web addresses they declared, which you see and approve when you install them.
2. Read tracking
Read tracking uses three signals: a read-receipt request, a tracking image and tracked links. You can turn each one off per account and per message, and you can add a line to your signature telling recipients that a message is tracked.
What our tracking service receives
When you send a tracked message, your app registers a random, unguessable code (a “token”) for each recipient, together with the time it was sent. The token is linked to a random key for your installation, not to your name or email address.
When a recipient’s mail app loads the tracking image or the recipient clicks a tracked link, the service records an event with:
| Stored | Why |
|---|---|
| Time of the event, and seconds since the message was sent | To tell a real open from an automatic one right after delivery |
| Signal type (image or link click) | A click is stronger evidence than an image load |
| Device class (for example desktop, phone, webmail image proxy or security scanner) | To label Apple Mail Privacy Protection and security gateways honestly |
| The browser or mail app identifier string (user agent), shortened | Used for the device class above |
| Approximate country, when our network provider supplies it | Shown to the sender as a coarse location |
| For clicks: the link’s destination address | So the sender can see which link was opened, and so the recipient is forwarded there |
Never stored: IP addresses (they are used for a moment to recognise known scanners and to limit abuse, then discarded), message content, subjects, sender or recipient email addresses, or anything that fingerprints the recipient.
Only the installation that registered a token can read its events. Events and tokens are deleted automatically after 12 months.
Read receipts (MDN) travel as ordinary email from the recipient’s mail server to yours; they never pass through our service.
If you receive tracked mail
You stay in control: blocking remote images in your mail app stops the tracking image, and declining read-receipt requests stops receipts. BC10 Mail never shows a sender “Not read”, so declining does not mark you as ignoring anyone. Replies and forwards written in BC10 Mail have the tracking removed.
3. The web app (mail.brandcode10.com/app/)
The web app runs in guest mode: you sign in with your own mailbox, and we do not create an account for you.
- Your mail password and the mail you view are held only in the server’s memory for the length of your session. They are never written to disk, logs or backups.
- Your session ends when you sign out, after 30 minutes without activity, after 12 hours at most, or when the service restarts. Everything in memory for that session is then deleted.
- One strictly necessary cookie keeps you signed in during the session. The web app does not keep an offline copy of your mail in your browser in guest mode.
- Messages you send with tracking use the same tracking service described in section 2.
4. This website
This site sets no cookies and uses no analytics, advertising, embedded videos or third-party fonts. If you switch between light and dark mode, that choice is saved in your own browser’s storage. The download page reads the current version number from our update feed. Like any web server, our hosting provider may keep standard access logs (including IP addresses) for a short time for security and troubleshooting.
5. Sharing, hosting and retention
- We do not sell or rent data and do not use it for advertising.
- Our services run on our hosting provider’s servers in Singapore. Crash reports, when enabled, are processed by Sentry.
- Tracking events: deleted after 12 months. Web app sessions: deleted when the session ends. Mail on your PC: kept until you remove the account in the app.
- We may disclose information if the law requires it, but by design we hold very little that could identify you.
6. Your choices and rights
Depending on where you live (for example under Thailand’s PDPA or the EU GDPR), you may have the right to access, correct or delete personal data and to object to its processing. You can switch off tracking, crash reports and AI features in the app at any time, and removing an account deletes its local mail. For any privacy request or question, contact BrandCode10 through brandcode10.com. We aim to answer within 30 days.
Do not use read tracking to harass anyone or for unsolicited bulk email.
7. Changes
If this policy changes, we will update this page and the date at the top.