Your messages carried by crows, not corporations
Privacy-first email from Iceland. Outside Five Eyes. Genuine secure deletion.
Every design decision serves one purpose: keeping your communications private and under your control.
Hosted in Iceland, outside Five Eyes surveillance alliances. Your data is protected by some of Europe's strongest privacy legislation, with GDPR compliance built in from day one.
When you delete an email, we destroy it permanently. NIST SP 800-88 compliant overwrite on HDD storage ensures deleted data cannot be recovered. No other major provider offers this.
See how it works →TLS 1.3 in transit, per-user mail-crypt encryption on disk. Even in the event of physical server access, your messages remain encrypted.
No data mining. No ad profiling. No metadata harvesting. We don't read your email, ever. Our business model is subscriptions, not surveillance.
The technical details behind our key differentiator: why we chose HDDs, and why it matters.
Physically destroyed on disk
When most email providers "delete" a message, they simply remove the pointer in their database. The actual data remains on disk, recoverable until the storage system happens to overwrite that sector with something else. That could take days, months, or never.
KrakuMail does things differently.
Hard disk drives allow deterministic overwrite of specific sectors. When you delete an email, we know exactly where it lives on the physical platter, and we can write over that exact location with verified random data.
This is fundamentally impossible on SSDs, where wear leveling and the Flash Translation Layer (FTL) abstract away physical storage locations. The drive's firmware decides where data actually lives, making guaranteed sector-level overwrite impossible. TRIM commands tell the drive a block is no longer needed, but the drive may retain the data indefinitely.
Every deleted message undergoes a verified overwrite process compliant with NIST SP 800-88 Rev. 2 — the current federal standard for media sanitization.
No hidden fees. No data monetization. You pay for the service; we protect your privacy.
Kraku comes from Old Norse kráka, meaning crow. In Norse mythology, Odin kept two ravens: Huginn (thought) and Muninn (memory). Each day they flew across the world, carrying messages back to their keeper. KrakuMail carries yours — faithfully, privately, and without reading them along the way.
Iceland runs on geothermal and hydroelectric power, making it one of the greenest places on Earth to operate servers. But our choice of jurisdiction goes deeper than energy. Iceland has some of Europe's most progressive privacy legislation, it sits outside the Five Eyes, Nine Eyes, and Fourteen Eyes intelligence-sharing alliances, and it has a centuries-long tradition of fierce independence.
When your data is stored in Iceland, Icelandic law applies. Not American. Not British. Icelandic courts have consistently upheld individual privacy rights, and there is no equivalent of a National Security Letter or FISA warrant here.
KrakuMail is built on Mailcow — a fully auditable, open-source email platform. No proprietary black boxes. No hidden backdoors. The entire mail stack, from Postfix and Dovecot to SOGo webmail, is open source software that anyone can inspect, audit, and verify. Our secure deletion layer sits on top of this proven foundation.
KrakuMail is currently in private beta. Request early access and we'll send you an invite.
Already have an invite? Sign in to webmail
Full IMAP/SMTP support — use with Thunderbird, Apple Mail, or any client