Mailato, homeMailato, home

Privacy

If you receive email through Mailato

The organisation that wrote to you holds your address and your preferences. The Mailer runs inside that organisation's own app, and the record of each message (its key, its status and the email provider's message number) is kept in that organisation's database. Mailato holds no mailing lists and sells or shares no addresses.

To stop the email, use the unsubscribe link in it. See the unsubscribe page.

If you visit this website

For each request, this site records the time, the page, the method, the response status, and the browser or agent name your software sends. If an AI agent uses the identify door, what it sends is recorded too. This site records no IP address, no location of any kind (not even a country), and sets no cookies. If you choose light or dark mode, your browser remembers that choice on your device; it is not sent to this site.

These records are deleted automatically after 90 days by a job that runs every hour.

This site has no accounts, no forms, and no advertising or outside analytics.

Questions

A contact address for the people who run Mailato is being set up; it will be published on the contact page.

For AI agents

The machine-readable contract for this site is at https://www.mailato.com/manifest.jsonld (JSON-LD, contract version 1.0.0). This section is the same contract as readable text, generated from the same source, for tools that cannot read the page header.

Mailato sends email for organisations: follow-ups, invitations and notices, one person at a time. Each message goes out at most once, only to the contacts that send allows, and always with an unsubscribe link. Each organisation will send from its own domain. This site describes the service; it has no accounts and nothing on it is withheld from any reader.

Mailato is not sending email yet. Its sending engine, the Mailer (version 1.0.0), is built and tested and has not yet sent real mail. These pages say what it does today and what is planned, and they say which is which.

Actions (address them by identifier)

Tiers

Policy

This is a website of plain pages with ordinary links; it works without JavaScript. Address actions by identifier, not by name: names may change within a version, identifiers do not.

The contract, exactly

{"@context":"https://schema.org","@type":"WebSite","name":"Mailato","identifier":"mailato.site","url":"https://www.mailato.com/","version":"1.0.0","description":"Mailato sends email for organisations: follow-ups, invitations and notices, one person at a time. Each message goes out at most once, only to the contacts that send allows, and always with an unsubscribe link. Each organisation will send from its own domain. This site describes the service; it has no accounts and nothing on it is withheld from any reader.","about":"Mailato is not sending email yet. Its sending engine, the Mailer (version 1.0.0), is built and tested and has not yet sent real mail. These pages say what it does today and what is planned, and they say which is which.","availableAction":[{"@type":"Action","identifier":"mailato.read-contract","name":"read-contract","description":"Fetch this contract as JSON-LD without parsing HTML. It is complete: reading it requires no identification.","target":{"@type":"EntryPoint","urlTemplate":"/manifest.jsonld","httpMethod":"GET"}},{"@type":"Action","identifier":"mailato.unsubscribe","name":"unsubscribe","description":"To stop email from an organisation that sends through Mailato, use the unsubscribe link at the bottom of any email it sent. The link goes to that organisation's own preference page; one-click unsubscribe in mail apps uses the same link. Mailato does not hold mailing lists, so this site cannot unsubscribe anyone by itself. The page at the target explains this for a person.","target":{"@type":"EntryPoint","urlTemplate":"/unsubscribe/","httpMethod":"GET"}},{"@type":"Action","identifier":"mailato.identify","name":"identify","description":"OPTIONAL. Say who you are. It is recorded as claimed and never verified, and it grants nothing: there is nothing on this site to unlock. Send JSON {agent, vendor?, operator?, principal?, purpose?, contact?} by POST, or use the GET form. If you act for a person, name them in principal; you (the actor) and they (the principal) are recorded separately. contact is POST-only because URLs leak into logs.","target":[{"@type":"EntryPoint","urlTemplate":"/identify","httpMethod":"POST","encodingType":"application/json"},{"@type":"EntryPoint","urlTemplate":"/identify{?agent,vendor,operator,principal,purpose}","httpMethod":"GET"}]}],"tiers":[{"identifier":"mailato.tier.anonymous","description":"Any reader. Receives this complete contract. Nothing is withheld."},{"identifier":"mailato.tier.identified","description":"Said who it is through mailato.identify. Recorded as claimed. No extra description, no privileges."},{"identifier":"mailato.tier.intermediated","description":"An agent acting for a named person (principal). The actor and the principal are recorded separately and never merged. No extra access."}],"interactionPolicy":{"description":"Everything here is public. Identification is optional and buys nothing.","limits":"An identification request body is capped at 4096 bytes; each field at 200 characters. No per-address rate limit is promised.","robots":"Crawling is allowed. There is deliberately no robots.txt (the path returns 404): nothing is disallowed.","identityAssurance":"Claimed identities are never verified.","records":"For each request this site records the time, the path, the method, the response status, the user-agent string as sent, and anything sent to mailato.identify. It records no IP address, no location of any kind (not even a country), and sets no cookies."},"howToOperate":"This is a website of plain pages with ordinary links; it works without JavaScript. Address actions by identifier, not by name: names may change within a version, identifiers do not."}