Last updated: June 2025 ยท Built on Lightchain by the OrcaMail team.
1. What OrcaMail Is
OrcaMail is a wallet-to-wallet encrypted messaging service built on the Lightchain blockchain. It is operated by an individual developer and provided as-is for the benefit of the Lightchain community.
2. What Data We Collect
When you use OrcaMail, the following data is stored on our server:
- Wallet addresses โ your Ethereum-compatible public address, used to route messages to your inbox. Wallet addresses are pseudonymous and are not linked to your real-world identity by this service.
- Encrypted message blobs โ the ciphertext of messages sent to you. These are encrypted client-side using ECIES (secp256k1 ECDH + AES-256-GCM) before they reach our server. We cannot decrypt or read your messages.
- Public keys โ your secp256k1 public key, submitted when you opt in, so senders can encrypt messages to you. This key is derived from your wallet and is not a private key.
- Opt-in preferences โ whether you have opted in to receive messages and any notification preferences you set.
- Send counts โ a per-address counter tracking how many messages you have sent, used to enforce the free-send limit.
We do not collect your name, email address, IP address logs, or any off-chain identity information.
3. End-to-End Encryption
All message content is encrypted on your device using ECIES encryption before being transmitted to our server. The server stores only the encrypted ciphertext and cannot read the contents of any message. Only the recipient, using their wallet's private key, can decrypt messages. The operator of this service has no ability to access message content.
4. Where Data Is Stored
Data is stored on a third-party cloud infrastructure provider (currently Railway). It is not stored on any personal device belonging to the operator. The cloud provider may have its own data processing terms which apply to infrastructure-level operations.
5. Data Retention & Deletion
Messages remain stored until you delete them from your inbox. Opt-in and public key records remain until you opt out. Send count records are retained for service integrity. You can remove your data at any time by opting out in the Settings tab, which deletes your opt-in record and public key from our server.
6. No Sale or Sharing of Data
We do not sell, rent, or share your data with third parties for marketing or advertising purposes. Data may be disclosed if required by law.
7. No Warranty โ Service Provided AS-IS
THIS SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. THE OPERATOR DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE FROM SECURITY VULNERABILITIES.
8. Limitation of Liability
TO THE FULLEST EXTENT PERMITTED BY LAW, THE OPERATOR SHALL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF OR INABILITY TO USE THIS SERVICE, INCLUDING BUT NOT LIMITED TO DATA LOSS, UNAUTHORIZED ACCESS TO DATA, SERVICE INTERRUPTION, OR ANY BREACH OF SECURITY. YOUR USE OF ORCAMAIL IS ENTIRELY AT YOUR OWN RISK.
9. Pseudonymity
OrcaMail does not require or collect real-world identity information. Wallet addresses are pseudonymous identifiers. We make no attempt to link wallet addresses to real identities. However, blockchain transactions are public by nature โ on-chain activity related to the OrcaMail contract is visible on the Lightchain network.