Take your correspondence back.

I · The procedure

Write a letter, we'll act on it.

We don't keep a self-service "delete my account" button — the consequences are large enough that we'd rather you wrote a sentence and we wrote one back. The address is privacy@emcognito.com. We answer every one ourselves; there is no ticket queue.

1. 01

   You write.

   Send a short note to privacy@emcognito.com from the address you signed in with. The button below will draft one for you. If you've lost access to the original mailbox, write from any address and we'll work it out by other means.

2. 02

   We confirm.

   We reply, in person, within one working day — usually the same hour. The reply restates what we'd be removing so there is no ambiguity, and asks you to confirm. Nothing is deleted before that confirmation lands.

3. 03

   We act.

   On confirmation, account records and identity rows in DynamoDB are removed immediately; stored mail in S3 follows the published lifecycle, or sooner if you ask. Any active Stripe subscription is cancelled as part of the same operation, with no further charges. We send a final note when the work is done.

II · What is removed

Everything tied to your name.

Account

Your sign-in record, magic-link history, registered passkeys, and session cookies. Removed at confirmation; cannot be recovered.

Identities & domains

Every domain you'd added, the per-domain DKIM keys, and the From-address identities derived from them. DKIM private keys are destroyed in KMS; DNS records you placed at your registrar are yours to remove or leave (we have no access to your registrar).

Mail

Every received and sent message in DynamoDB and the corresponding .eml objects in S3. DynamoDB rows go on confirmation; the S3 objects follow the lifecycle stated in the privacy policy unless you ask for an earlier purge in the same letter.

Billing

Active Stripe subscriptions are cancelled immediately. The Stripe customer record itself is retained only as long as our accountants need it for tax and chargeback handling, then erased. No further charges are issued after confirmation.

Logs

Operational logs (delivery, sign-in, error traces) age out on their normal rotation — thirty days at the longest — after which no record of the account remains in our systems.

If you'd like an export of your archive before we proceed, say so in the same letter. We'll deliver a tarball of raw .eml files first and wait for your go-ahead before deleting anything.