Privacy Policy
Last updated: 8 May 2026.
AcelleMail is a self-hosted email marketing application. When you install AcelleMail on your own server, the application runs entirely on your infrastructure — your subscriber lists, your campaigns, and your sending data never touch our servers. This document covers what happens when you visit
acellemail.com (this marketing site) and when you interact with our support channels. The privacy posture of the AcelleMail application itself, once installed on your server, is up to you to configure.
What data this site collects
Very little. The marketing site is fully static and runs Google Analytics 4 for aggregate traffic measurement (page views, country, referrer, device class) — no advertising pixels, no session-replay, no heatmap tools, no Facebook / TikTok pixels. GA4 truncates IP addresses automatically before storage and we have disabled Google Signals + Ads remarketing in the property settings, so the data is not used to build cross-site advertising profiles.
The webserver writes standard access logs (timestamp, request URL, user-agent, HTTP status) for operational reasons — debugging server errors, identifying abusive crawlers. These logs are retained for 14 days then rotated. They are never analysed for marketing or sold.
Cookies
The site sets two strictly-necessary Laravel cookies and the standard Google Analytics cookies:
XSRF-TOKEN — anti-CSRF token issued by the Laravel framework, expires after 2 hours. Strictly necessary.acellemail-session — opaque session identifier, expires after 2 hours. Strictly necessary._ga, _ga_* — Google Analytics 4 visitor + session identifiers, lifetime up to 2 years. Used for aggregate traffic reports only.
See the dedicated Cookies Policy for the technical detail and opt-out instructions.
Third-party content embedded on this site
A small number of third parties may receive a request from your browser as a side-effect of rendering this site:
- Google Analytics (googletagmanager.com, google-analytics.com) — gtag.js loads from Google to record aggregate page views. Governed by Google's privacy policy in addition to ours.
- YouTube (youtube-nocookie.com) — the home page embeds three product walkthrough videos from YouTube's privacy-enhanced no-cookie domain. YouTube does not set tracking cookies until you click play.
- CodeCanyon (envato.com) — when you click a "Buy" or "View on CodeCanyon" link, you leave our site and Envato's privacy policy applies.
- Demo subdomain (demo.acellemail.com) — a separate AcelleMail instance for hands-on demos. It issues a temporary test account and is governed by the same privacy posture as a self-hosted install.
Your contact information when you reach out
When you email support@acellemail.com or post on the CodeCanyon comments thread, we receive the email address and message body you provide. We use this only to answer your question and retain support tickets for up to 24 months for follow-up reference. We do not enroll you in any marketing list, newsletter, or drip campaign.
Your rights under GDPR / CCPA
You have the right to access, correct, export, or delete any personal data we hold about you. Because the marketing site collects no personal data and the support channel only retains messages you sent us, the practical exercise of these rights is: email support@acellemail.com from the address whose history you want changed, and we will action the request within 30 days.
Children
AcelleMail is a B2B developer tool. The site is not directed at children under 16, and we do not knowingly collect personal data from anyone under 16.
Updates to this policy
Material changes are committed to this page with the "Last updated" date at the top. The full revision history is publicly viewable in the project's git repository.
Contact
Privacy questions: support@acellemail.com. For the technical security architecture of the AcelleMail application itself, see our security page.
