Docket

Privacy policy

Last updated 31 October 2026

Docket is software you run yourself. Your mail, your credentials and your search index stay on your server and your devices. We never receive your mail.

Who we are

Docket is made by Felix Mrak, an individual developer in Austria (“we”). Write to hello@docket.at about anything in this policy.

The Docket software

  • The Docket server (docketd) runs on a machine you control. It connects directly to your mail providers and stores your mail, search index and settings there. Account credentials are encrypted with a key it generates on that machine.
  • The Mac and iPhone apps talk only to your server. They keep what they need to show your mail on the device.
  • We have no access to your server, your devices or your mail, and Docket sends none of it to us, apart from a feedback screenshot you choose to send (see Invites and requests below).
  • Docket has no crash reporting. It does send an anonymous usage count, described below, which you can turn off.

Anonymous usage counts

So we can count how many people use Docket and in which countries, the server (docketd), the Mac app and the iPhone app each tell docket.at that they exist: when they start, and then at most once a day. Each sends:

  • a random install id (a UUID made on your machine the first time it runs, stored there; it is not derived from your hardware, accounts, email addresses or name);
  • which part it is (server, Mac or iPhone), its version, and the operating system with its major version (for example linux-x64 or macos-26);
  • if you have an invite, the invite code your server was installed with (the Mac and iPhone apps learn it from your server). See “Invites” below: with an invite, these counts are linked to the person invited.

Nothing about your mail, accounts, contacts or settings is ever sent. Cloudflare works out the country from the connection's address when the count arrives; we store that country with the count and never store the address or the user agent. For each install we keep one record (its random id, the part, the latest version and operating system, the country of the latest count, and the dates of the first and latest count) and the days it counted, in a Cloudflare D1 database on our account. They are used only for counting installs, versions and countries. We delete the daily records after about 13 months, and an install’s record about 13 months after its last count; as long as an install keeps counting, its record stays. We do this on the basis of our legitimate interest in knowing whether the software is used (GDPR Art. 6(1)(f)).

To turn it off: run sudo docketd telemetry off on the server (or set DOCKET_TELEMETRY=off in /etc/docket/docketd.env and restart docketd), and switch off “Share anonymous usage counts” in the Mac app's Settings → General and the iPhone app's Settings. Nothing is sent after that.

Invites and requests

Docket is invite-only during the beta. Downloads from dl.docket.at need a personal invite, a link Felix sends you.

  • Your invite. We keep the name and email address Felix invited you with, a note, whether you may send feedback, and when it was made or revoked. Your installer, docketd update and the Mac app send your invite code to dl.docket.at to download and update. A usage count that carries your invite is linked to you: Felix sees when your install last reported, its versions and its country, and not your mail. We delete an invite 13 months after it is revoked, or when you ask. Revoking it stops new downloads and updates and unlinks your counts; installs you already have keep running.
  • Requesting an invite. The form on /request asks for your name, email address and, if you like, what you would use Docket for. We keep it only to answer you and delete it when we have, or after 90 days. Cloudflare Turnstile checks that the sender is not a bot (it receives what a browser sends it, as described in Cloudflare's privacy policy), and we get a Pushover notification with your name, email and note. Nobody is emailed automatically; Felix replies himself.
  • Feedback. If your invite allows it, the feedback you write in the Mac or iPhone app (the text, the marks on the screenshot, the screen you were on and the app version, and a screenshot) goes from your server to docket.at, where we store it with your name and the time, and Felix gets a notification. A screenshot is a picture of the Docket window as it was, so it shows whatever was on screen, which can be an open message; it is kept privately on Cloudflare (R2) and Felix opens it on a password-protected page. Felix reads each note himself. Only if he decides a note is worth acting on does he pass it on, with its screenshot, to an AI agent (a model run by his own AI provider) that works on fixing what you report. The exception is an invite Felix has marked trusted: its notes go straight to the AI agent without him reading them first. A note is deleted when he dismisses it, and in any case 90 days after you sent it. Docket never attaches mail itself; do not send feedback while a message you want to keep private is showing.

AI features

Triage, summaries and the other AI features send message content from your server to the AI provider you configure (for example Anthropic, OpenAI, OpenRouter, or your own Ollama), under your own API key. That provider's terms and privacy policy apply to what it receives. Without a key, nothing is sent to any AI provider.

Notifications

If you turn on iPhone notifications, your server sends them through Apple's Push Notification service. Their content is encrypted for your iPhone; Apple sees only a generic text such as “New mail”. If you set up Pushover notifications, they carry the sender's name and a short summary of the message to Pushover.

Updates

When you install or update, your server and your Mac download Docket from dl.docket.at, which is served by Cloudflare and counts downloads as described below.

This website and downloads

docket.at and dl.docket.at are served by Cloudflare, Inc., which processes the technical data any web request carries (such as your IP address and browser) to deliver the pages and files and protect them from abuse. We use no cookies and no trackers. The one other service on the site is Cloudflare Turnstile on the request form, described below.

  • Visits. We use Cloudflare Web Analytics to count visits and page views by page, country and browser type. It uses no cookies or local storage and does not fingerprint visitors with their address or user agent. Cloudflare keeps the detailed data for about a week and aggregates it after that.
  • Downloads. When the installer, a docketd update, the Mac app or its updater fetches a file from dl.docket.at, we count it: which file (install script, server binary, Mac app, or the Mac update list), its version and CPU type, and the country. Again no address and no user agent is stored; these counts are added up per day in the same database and kept for about 13 months. A visit to docket.at/install.sh or the download page is counted the same way, by page and country.

Emails to us

If you write to hello@docket.at, we use your message and address to answer you and keep them only as long as that conversation needs.

Google API Services User Data Policy

When you add a Gmail account, Docket asks Google for permission to read, organise and send your mail. That data goes from Google directly to your own Docket server, and is used only to provide Docket's features to you: showing, searching, triaging and organising your mail, and sending what you write or approve.

  • Docket's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • Docket does not use Google user data for advertising, does not sell it, and does not use it to train AI models. The AI provider you configure receives message content under your own key and its own terms, so choose one that does not train on your requests.
  • It is transferred to others only where you direct it, to provide the features you turned on: to the AI provider you configure, and, if you turn on Pushover notifications, sender names and short summaries to Pushover.
  • We never see your Google user data. It stays on your own server and devices, apart from the transfers you direct above.
  • You can revoke Docket's access at any time in your Google Account settings, and remove the account from Docket on your server.

Your rights

Because your mail lives on your own server, you control it directly. Counts without an invite carry no name or address, so we cannot tell which are yours; turning them off stops new ones, and old ones are deleted after about 13 months. For anything we do hold (emails you send us, your invite and what you wrote in a request), you can ask us to show or delete it, and you have the rights the GDPR gives you: access, correction, deletion, restriction, portability and objection. Ask at hello@docket.at. You may also complain to the Austrian Data Protection Authority (dsb.gv.at).

Changes

If this policy changes, we update it here and change the date above.