Your email is yours.

• AEGIS has no accounts, no analytics and no ads.
• Emails you paste, upload or send to the test inbox are shown only to the browser that sent them: never in a public feed.
• Email text is deleted after 24 hours by default. The verdict is kept until you erase it.
• "Delete my history" on the Cases page erases everything this browser analyzed, immediately.
• To analyze an email, its content is sent to AI models hosted by Featherless.

For each analysis AEGIS stores the email you submitted, the verdict, the evidence it cites, and how long each step took.

• Pasted and uploaded emails are private to your browser. After the retention period (24 hours by default) the email text is deleted and only the verdict and its summary remain. "Delete my history" on the Cases page removes them entirely.
• Built-in samples and red-team variants are synthetic and public.
• Emails sent to the test inbox carrying your personal code (shown on the Live page) are shown to your browser only, with names, addresses and long numbers partially censored. That first coded email links its sender address (stored only as a hash) to your browser, so later mail from it needs no code; "Delete my history" removes the link. Other mail is analyzed and answered by email but shown to nobody. The test inbox is run by AgentBoxD, which keeps its own copy of the mail it receives.
• Campaign indicators (sender, domains, links, phone numbers, a template fingerprint) are kept so that related scams can be linked. Other people only ever see that "a private email shares this infrastructure", never its subject, sender or content.

• Featherless AI hosts the language and vision models. The email content (and, for HTML email, a screenshot of it rendered offline) is sent there for analysis. How Featherless handles requests is covered by their policies.
• AgentBoxD provides the AEGIS test inbox. Only mail you send to that address passes through it, and the verdict is replied to you through it. Pasted emails never go to AgentBoxD.
• Links in the email are fetched by the AEGIS link sandbox, without JavaScript and without cookies, so the sites they point to see a request from AEGIS, not from you.

AEGIS sets one cookie, aegis_viewer. It holds a random value that says which private results belong to this browser. It is HttpOnly (page scripts cannot read it), is not linked to your name or email, and is not used for analytics or tracking. Clearing it means this browser can no longer list your private results; anything you still have a link to stays reachable through that link until it is deleted.

Every case has a long random address. Anyone with that address can open it, so treat it like a password. The share link shows a reduced version for friends and family: the verdict, red flags and next steps, without the full email text.

• Email text is deleted automatically after the retention period (24 hours by default).
• Delete my history on the Cases page erases everything this browser analyzed, pasted or emailed, right away, and forgets which sender address belongs to it.