Effective April 2, 2026 · MailBloom Studio
1. The short version
MailBloom keeps your workspace data in your browser. Account details (email, hashed password, plan) and workspace state (campaigns, subscribers, reports, settings) persist locally on your machine. We do not sell data and there is no advertising.
2. What is stored, and where
Account records: your email, a SHA-256 hash of your password (the password itself is never stored), the plan on your workspace, and the workspace name you set during setup.
Workspace state: your campaign blocks and subjects, the subscriber list with tags and engagement recency, segment definitions, and send reports with per-recipient rows.
All of this lives in your browser's local storage under mailbloom.* keys. Clearing site data or using the reset control in workspace settings removes it entirely.
3. What is never collected
Card data: checkout does not collect or store card numbers, expiry dates, or CVC.
Plaintext passwords: only irreversible hashes are stored locally.
Anything about your subscribers beyond what you enter or import yourself.
4. Your subscribers' rights
Unsubscribes you record are honored immediately and kept visible in the list with their status, so a former subscriber never receives another letter. You may export or delete any subscriber record at any time.
5. Retention
Send reports keep their per-recipient rows for as long as the campaign exists in your workspace, and die with it on deletion.
6. Contact
Privacy questions go through the contact form — a human reads the mailbox within one business day.