الرخ — بريدٌ يحفظ أسراره
Mail that keeps
its secrets.
Every message is sealed to keys that exist only in your unlocked browser.
We cannot read the mail we store. Not “won’t” — cannot.
The server sees mail from outside only as it arrives, and seals it at once; it sees mail you send to an outside address while it transmits it, as ordinary email requires. Between RocMail members, your browser seals the letter to the recipient’s key before it leaves, so the server passes on only ciphertext.
A name for every service. When one leaks, let it rest; when a trial ends, let it dissolve. Your real mailbox never appears anywhere.
المشربية
How the seal works
Like a mashrabiya screen: light passes through, sight does not. The server stores and routes your mail without being able to look at what it keeps — which is why the seal is called Mashrabiya.
A message arrives
The ingest worker holds only your PUBLIC key. It sees a letter from outside only as it arrives, then seals the sender, subject, body, attachments — even the filenames — to your vault identity and stores ciphertext. It can encrypt to you; it can never decrypt.
The server keeps ciphertext
What sits in the database is unreadable — to us, to a thief who steals a backup, to anyone with a court order for the disks. The key that could open it does not exist on any server. The old server key was destroyed, publicly and on the record.
Your vault opens it
Your passphrase never leaves your device. Argon2id stretches it into the key that unwraps your vault, and mail becomes readable only inside your unlocked tab. Lock it, and the mailbox returns to lattice.
الصدق
What we can still see
A mail server has to act on some data while your vault is closed — that is what makes it a mail server and not a locked box. Here is the complete list, on the landing page, because you should not need to find a whitepaper to learn it.
Everything else we store — senders, recipients, subjects, bodies, previews, attachment bytes and names, drafts, your address book, the senders you block — is ciphertext sealed to your keys. The search index is not stored here at all: it lives on your devices. The full threat model →
الأدوات
A whole mail client, not a compromise
Up to 500 names
A fresh address for every service. When one leaks, retire it — your real mailbox never appears.
Search that stays on your device
Each of your devices builds its own index by opening your mail, and keeps it sealed in its own storage. A search never leaves the device: we are not told what you look for or what it finds — only that each device downloads every letter once.
Sealed attachments
Bytes and filenames are ciphertext at rest. Photos preview and files download inside your unlocked tab.
Sealed archive backup
Export your whole mailbox as ciphertext and restore it later. Only your passphrase or recovery phrase opens what it holds.
Post-quantum ready
Mashrabiya’s hybrid KEM means mail recorded today still faces ML-KEM-768 in a quantum future.
Two-factor login
TOTP with single-use recovery codes. Your password unlocks the shell; only your passphrase unlocks mail.
Installable, with an offline cache
If the connection drops while your vault is open, mail you have already opened stays readable. Starting the app without a network shows the sign-in screen: signing in and unlocking need the connection.
Yours to leave
One click exports your whole mailbox, attachments included, as standard mbox — built in your browser, the only place it can be opened. An exit door is part of the ethics, not a support ticket.
The honest price of “no back door”
If you lose your passphrase and your 24-word recovery phrase, your mail is gone. Not “contact support” gone — mathematically gone. There is no reset, no escrow, no operator override.
This is not a limitation we plan to fix. It is the same fact as “nobody else can read the mail we store,” seen from the other side. Products that promise both recovery and privacy are describing a key they keep and hope you never ask about.
أسئلة
Fair questions
If you cannot read my stored mail, how does spam filtering work?
At arrival, before sealing — the worker scores the message in memory, stamps the verdict, seals everything, and forgets. The verdict, and the sender domains you mark as spam or not spam, are the only residue; the filter keeps no message history.
Can you read the mail I send?
To an outside address, yes, while it is sent: ordinary email has no other way to reach Gmail or Outlook, so the server reads the letter to transmit it, and the copy in your Sent folder is sealed. To another RocMail member, no: your browser seals the letter to their key before it leaves your device, and the server only passes on ciphertext. The one trust that remains is the key itself. Your browser asks the server for it, and seals to it only once the key checks out against the instance’s key log: a public, append-only record of every key the server hands out, which your own app watches for a key that is not yours. A server that lied about a key would have to publish the lie there. The log has no outside witnesses yet, so that holds as long as people compare what they see. Mail to a member who has not set up a vault is the exception: the server seals it as it arrives. A desktop mail app sending through the bridge is not one — the bridge seals the letter itself, against the same log.
What if I forget my password?
Your account password can be reset with your vault passphrase (plus your 2FA code, if you use one) — it only guards the shell. Your vault passphrase cannot be reset by anyone. That is what the 24-word recovery phrase is for: write it on paper, keep it like a passport.
Why should I trust the operator at all?
You should not have to — that is the design goal. The remaining trust is in the code your browser runs: it is inspectable, and the honest limit of every browser-delivered E2E product (Proton and Tuta included) is that a malicious update could betray you. We state that limit instead of glossing it.
Who can see that I received mail, even sealed?
Traffic analysis is real and we do not pretend otherwise: the server sees that mail arrived for you, when, and how big. Sealing hides what was said, not that something was.
Is this free?
No — €5 a month, flat at every block length, paid through vouchers that never learn which mailbox they fund. You pay with money so you never pay with yourself. An invite from the operator grants the first month free, and non-payment never deletes anything: mail keeps arriving and stays readable; only sending pauses.