1<!doctype html> 2<html lang="en"> 3<head> 4 <meta charset="utf-8"> 5 <meta name="viewport" content="width=device-width, initial-scale=1"> 6 <link rel="icon" type="image/png" href="/favicon.png"> 7 8 <!-- ============ TRACKING (consent-gated, G7) ============ --> 9 <!-- GA4 + Google Ads load ONLY after the visitor accepts cookies in the 10 banner (Consent Mode v2, default all-denied; Cancel = zero requests 11 to Google). Marketing site only â the app carries no trackers. --> 12
12<script src="/cookie-consent.js"></script>
12 13 <title>Your inbox isn't yours â why free email fails at privacy â Confidesk</title> 14 <meta name="description" content="Free email feels private because it's password-protected. But a password only controls who may open the drawer â the provider still holds the key. What 'encrypted' really means, why one inbox breach unlocks everything, and what AI profiling changes."> 15 <link rel="canonical" href="https://confidesk.com/why-public-email-fails/"> 16 <meta name="theme-color" content="#c5202e"> 17 <meta name="color-scheme" content="light"> 18 19 <!-- Open Graph / social --> 20 <meta property="og:type" content="article"> 21 <meta property="og:site_name" content="Confidesk"> 22 <meta property="og:url" content="https://confidesk.com/why-public-email-fails/"> 23 <meta property="og:title" content="Your inbox isn't yours â why free email fails at privacy"> 24 <meta property="og:description" content="A password controls who's allowed to open the drawer. It says nothing about who else already has a copy of the key."> 25 <meta property="og:image" content="https://confidesk.com/confidesk-logo.png"> 26 <meta name="twitter:card" content="summary"> 27 <meta name="twitter:title" content="Your inbox isn't yours â why free email fails at privacy"> 28 <meta name="twitter:description" content="What 'encrypted' really means at a free provider, why one inbox breach unlocks everything, and what AI profiling changes."> 29 30 <style> 31 :root { 32 --bg: #f4f5f7; 33 --surface: #ffffff; 34 --ink: #15161a; 35 --muted: #5b616e; 36 --faint: #8a909c; 37 --line: #e6e8ec; 38 --red: #c5202e; 39 --red-soft: #fdecee; 40 --dark: #111318; 41 --dark-2: #1a1d24; 42 --radius: 18px; 43 --radius-sm: 11px; 44 --maxw: 1140px; 45 --font: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif; 46 --shadow: 0 1px 2px rgba(17,19,24,.04), 0 12px 32px -12px rgba(17,19,24,.12); 47 } 48 * { margin: 0; padding: 0; box-sizing: border-box; } 49 html { scroll-behavior: smooth; } 50 body { 51 font-family: var(--font); 52 color: var(--ink); 53 background: var(--bg); 54 line-height: 1.6; 55 -webkit-font-smoothing: antialiased; 56 text-rendering: optimizeLegibility; 57 } 58 a { color: inherit; text-decoration: none; } 59 img, svg { display: block; max-width: 100%; } 60 .wrap { max-width: var(--maxw); margin: 0 auto; padding: 0 24px; } 61 .eyebrow { 62 font-size: 12px; font-weight: 700; letter-spacing: .12em; 63 text-transform: uppercase; color: var(--red); margin-bottom: 16px; 64 } 65 h1, h2, h3 { line-height: 1.15; letter-spacing: -.02em; font-weight: 700; } 66 h1 { font-size: clamp(2.1rem, 5vw, 3.4rem); } 67 h2 { font-size: clamp(1.7rem, 3.6vw, 2.5rem); } 68 h3 { font-size: 1.15rem; } 69 p { color: var(--muted); } 70 section { padding: 88px 0; } 71 .lead { font-size: 1.12rem; color: var(--muted); max-width: 60ch; } 72 73 /* Buttons */ 74 .btn { 75 display: inline-flex; align-items: center; gap: 8px; 76 font-size: .98rem; font-weight: 600; padding: 12px 22px; 77 border-radius: var(--radius-sm); border: 1px solid transparent; 78 cursor: pointer; transition: transform .08s ease, background .15s ease, border-color .15s ease; 79 white-space: nowrap; 80 } 81 .btn:active { transform: translateY(1px); } 82 .btn-primary { background: var(--red); color: #fff; } 83 .btn-primary:hover { background: #a91a26; } 84 .btn-ghost { background: var(--surface); color: var(--ink); border-color: var(--line); } 85 .btn-ghost:hover { border-color: #cfd3da; } 86 .btn-dark { background: #fff; color: var(--dark); } 87 .btn-dark:hover { background: #f0f0f2; } 88 .btn-outline-light { background: transparent; color: #fff; border-color: rgba(255,255,255,.28); } 89 .btn-outline-light:hover { border-color: rgba(255,255,255,.6); } 90 91 /* Header */ 92 header.nav { 93 position: sticky; top: 0; z-index: 50; 94 background: rgba(244,245,247,.82); 95 backdrop-filter: saturate(180%) blur(12px); 96 -webkit-backdrop-filter: saturate(180%) blur(12px); 97 border-bottom: 1px solid var(--line); 98 } 99 .nav-inner { display: flex; align-items: center; gap: 28px; height: 64px; } 100 .brand { display: flex; align-items: center; gap: 10px; font-weight: 700; font-size: 1.08rem; letter-spacing: -.01em; } 101 .brand .logo { width: 28px; height: 28px; } 102 .nav-links { display: flex; gap: 26px; margin-left: 8px; } 103 .nav-links a { color: var(--muted); font-size: .95rem; font-weight: 500; } 104 .nav-links a:hover { color: var(--ink); } 105 .nav-actions { margin-left: auto; display: flex; align-items: center; gap: 14px; } 106 .nav-actions .signin { font-weight: 600; font-size: .95rem; } 107 .nav-actions .signin:hover { color: var(--red); } 108 109 /* Hero */ 110 .hero { padding: 72px 0 64px; } 111 .hero h1 { margin-bottom: 20px; max-width: 22ch; } 112 .hero .lead { margin-bottom: 0; } 113 114 /* Article sections */ 115 .section-head { max-width: 62ch; margin-bottom: 32px; } 116 .section-head h2 { margin-bottom: 16px; } 117 .prose { max-width: 66ch; } 118 .prose p { margin-bottom: 16px; } 119 .prose p:last-child { margin-bottom: 0; } 120 .prose strong { color: var(--ink); } 121 .num-label { display: inline-flex; align-items: center; gap: 10px; } 122 .num-label .num { 123 width: 26px;
123 height: 26px; border-radius: 50%; background: var(--ink); color: #fff; 124 font-weight: 700; font-size: .78rem; display: inline-flex; align-items: center; justify-content: center; 125 letter-spacing: 0; 126 } 127 128 /* Callout */ 129 .callout { 130 background: var(--red-soft); border: 1px solid #f6cdd2; border-radius: 12px; 131 padding: 18px 20px; margin: 24px 0 0; max-width: 66ch; color: #6d1620; 132 } 133 .callout .k { 134 display: block; font-size: .72rem; font-weight: 700; letter-spacing: .1em; 135 text-transform: uppercase; color: var(--red); margin-bottom: 6px; 136 } 137 .callout strong { color: #4d0f16; } 138 139 /* Assumed vs actual cards */ 140 .grid { display: grid; gap: 22px; } 141 .grid-2 { grid-template-columns: 1fr 1fr; } 142 .card { 143 background: var(--surface); border: 1px solid var(--line); 144 border-radius: var(--radius); padding: 24px 26px; box-shadow: var(--shadow); 145 } 146 .card .tag { 147 display: block; font-size: .72rem; font-weight: 700; letter-spacing: .08em; 148 text-transform: uppercase; color: var(--faint); margin-bottom: 10px; 149 } 150 .card.actual { border-color: var(--red); } 151 .card.actual .tag { color: var(--red); } 152 .card p { font-size: .96rem; } 153 .pair { max-width: 760px; margin-top: 28px; } 154 155 /* Dark band (AI profiling) */ 156 .dark { background: var(--dark); color: #fff; } 157 .dark p { color: #b9bdc7; } 158 .dark .eyebrow { color: #ff6b76; } 159 .dark h2 { color: #fff; } 160 .dark .prose strong { color: #fff; } 161 .infer-rows { display: grid; gap: 12px; margin: 30px 0; max-width: 560px; } 162 .infer-row { display: flex; align-items: center; gap: 12px; flex-wrap: wrap; } 163 .sig, .inf { 164 font-size: .86rem; font-weight: 600; padding: 8px 14px; border-radius: 9px; 165 white-space: nowrap; 166 } 167 .sig { background: var(--dark-2); border: 1px solid #262a33; color: #b9bdc7; } 168 .inf { background: rgba(255,107,118,.14); color: #ff7b85; } 169 .infer-row .arr { color: #4a4f5a; font-weight: 700; } 170 171 /* Final CTA */ 172 .final { text-align: center; } 173 .final h2 { font-size: clamp(1.9rem, 4vw, 2.8rem); margin-bottom: 16px; } 174 .final p { color: #c2c6d0; max-width: 52ch; margin: 0 auto 30px; } 175 .final .btns { display: flex; gap: 14px; justify-content: center; flex-wrap: wrap; } 176 177 /* Footer */ 178 footer { background: #0c0e12; color: #aab0bd; padding: 40px 0; font-size: .9rem; } 179 .foot-bottom { display: flex; flex-wrap: wrap; gap: 8px 24px; justify-content: space-between; align-items: center; } 180 footer a { color: #cfd4de; } 181 footer a:hover { color: #fff; } 182 183 /* Responsive */ 184 @media (max-width: 680px) { 185 section { padding: 64px 0; } 186 .nav-links { display: none; } 187 .grid-2 { grid-template-columns: 1fr; } 188 } 189 @media (prefers-reduced-motion: reduce) { html { scroll-behavior: auto; } * { transition: none !important; } } 190 </style> 191</head> 192<body> 193 194 <!-- ============ NAV ============ --> 195 <header class="nav"> 196 <div class="wrap nav-inner"> 197 <a class="brand" href="/"> 198 <img class="logo" src="/confidesk-logo.png" alt="" width="28" height="28"> 199 Confidesk 200 </a> 201 <nav class="nav-links"> 202 <a href="/#how">How it works</a> 203 <a href="/#why">Privacy</a> 204 <a href="/#pricing">Pricing</a> 205 <a href="/user-guide/">Guide</a> 206 </nav> 207 <div class="nav-actions"> 208 <a class="signin" href="https://app.confidesk.com/">Sign in</a> 209 <a class="btn btn-primary" href="https://app.confidesk.com/register">Register</a> 210 </div> 211 </div> 212 </header> 213 214 <!-- ============ HERO ============ --> 215 <section class="hero"> 216 <div class="wrap"> 217 <p class="eyebrow">Why free email isn't private</p> 218 <h1>Your inbox isn't a mailbox. It's a filing cabinet someone else can open.</h1> 219 <p class="lead">Free email feels private because it's password-protected. But a password controls who's <em>allowed</em> to open the drawer â it says nothing about who else already has a copy of the key.</p> 220 </div> 221 </section> 222 223 <!-- ============ 01 PASSWORD ILLUSION ============ --> 224 <section style="background:var(--surface);border-top:1px solid var(--line);"> 225 <div class="wrap"> 226 <div class="section-head"> 227 <p class="eyebrow num-label"><span class="num">1</span> The password illusion</p> 228 <h2>Logging in proves who you are. It doesn't decide who can read your mail.</h2> 229 </div> 230 <div class="prose"> 231 <p>A login screen checks <strong>identity</strong>: does this password match this account. It says nothing about <strong>who can access the data</strong> behind it â because at an ordinary provider, your password is <strong>identification, not protection</strong>. The disks may well be encrypted, but that encryption is <strong>transparent</strong>: the system applies the keys automatically for every request it lets through. And inside the provider's organisation, your password plays no part at all â there, access is decided by internal access rights alone. An engineer, a support agent resolving a ticket, an ad-matching pipeline, an administrator: they reach your data without ever needing your password, and it arrives already decrypted.</p> 232 <p>People treat "I have a strong password" as if it meant "my mail is private." Those are two different claims â and only one of them is actually being made.</p> 233 </div> 234 </div> 235 </section> 236 237 <!-- ============ 02 WHAT ENCRYPTED MEANS ============ --> 238 <section> 239 <div class="wrap"> 240 <div class="section-head"> 241 <p class="eyebrow num-label"><span class="num">2</span> What "encrypted" usually means</p> 242 <h2>Most inboxes encrypt the road, not the room.</h2> 243 </div> 244 <div class="prose"> 245 <p>When a big provider says your email is "encrypted," they usually mean two things: the <strong>connection</strong> between your device and their servers â the same protection any ordinary website has â and encryption <strong>"at rest"</strong> on their disks. Both are real. Neither makes your mail private, because in both cases <strong>the provider holds the keys</strong>. Their systems decrypt your messages routinely and automatically: to index them for search, scan them for spam and malware, power convenience features, and answer a legal request in fully readable form.</p> 246 </div> 247 <div class="callout">
248 <span class="k">The key detail</span> 249 For data to be truly private, the <strong>party storing it</strong> must not hold the key that unlocks it. If your provider can hand your inbox to a court order, a hacker with internal access, or their own systems in readable form, then functionally the lock is theirs â not yours. 250 </div> 251 <div class="grid grid-2 pair"> 252 <div class="card"> 253 <span class="tag">What people assume</span> 254 <p>"It says encrypted, so nobody but me can read it."</p> 255 </div> 256 <div class="card actual"> 257 <span class="tag">What's usually true</span> 258 <p>The provider holds the keys. They can read it â and so can anyone who can compel or compromise them.</p> 259 </div> 260 </div> 261 </div> 262 </section> 263 264 <!-- ============ 03 ONE BREACH, EVERYTHING ============ --> 265 <section style="background:var(--surface);border-top:1px solid var(--line);border-bottom:1px solid var(--line);"> 266 <div class="wrap"> 267 <div class="section-head"> 268 <p class="eyebrow num-label"><span class="num">3</span> One breach, everything</p> 269 <h2>You're not storing an email account. You're storing a decade of yourself.</h2> 270 </div> 271 <div class="prose"> 272 <p>Most people never delete anything. A typical inbox that's been open for ten years quietly holds tax documents, medical correspondence, banking alerts, insurance claims, travel bookings â and the password-reset trail for nearly every other account tied to that address.</p> 273 <p>That last part is what makes email the master key. Break into the inbox and you don't just read old messages â you can walk into the bank account, the cloud storage, and the social accounts, one "forgot password" click at a time. This is why inbox takeovers are among the most common paths into <strong>identity theft</strong>: the target usually isn't the email itself, it's everything the email can unlock.</p> 274 </div> 275 </div> 276 </section> 277 278 <!-- ============ 04 FREE HAS A BUSINESS MODEL ============ --> 279 <section> 280 <div class="wrap"> 281 <div class="section-head"> 282 <p class="eyebrow num-label"><span class="num">4</span> Free has a business model</p> 283 <h2>If storage, scanning, and delivery cost money â and the service is free â something else is paying for it.</h2> 284 </div> 285 <div class="prose"> 286 <p>Large-scale free inboxes are supported by advertising and data businesses, and your correspondence is part of the raw material. For years the major free providers scanned message content directly to target ads â Google only stopped doing that in 2017, and some others carried on longer. What remains is subtler but still valuable: your mail is machine-read for filtering and "smart" features, and the receipts, bookings, subscriptions, and contacts flowing through it feed the commercial profile attached to you across the provider's other services.</p> 287 <p>None of this is hidden. It's standard, disclosed-in-the-terms business practice â the terms you accepted permit automated processing of everything you send and receive.</p> 288 </div> 289 </div> 290 </section> 291 292 <!-- ============ 05 WHAT AI CHANGES (dark) ============ --> 293 <section class="dark"> 294 <div class="wrap"> 295 <div class="section-head"> 296 <p class="eyebrow num-label"><span class="num" style="background:#ff6b76;color:var(--dark);">5</span> What modern AI changes</p> 297 <h2>Language models read tone. That makes profiling effortless.</h2> 298 </div> 299 <div class="prose"> 300 <p>Older ad-matching looked for keywords â "flight," "mortgage," "baby." Modern AI text processing can read far more than subject matter: it can infer <strong>sentiment, life stage, financial stress, relationship status, health concerns, and decision-making patterns</strong> from ordinary phrasing, without you ever naming the topic. A system doesn't need you to write "I'm getting divorced" â it can infer it from the shift in who you're emailing and how you're writing to them.</p> 301 </div> 302 <div class="infer-rows"> 303 <div class="infer-row"><span class="sig">Subject: "job offer"</span><span class="arr">→</span><span class="inf">likely income bracket</span></div> 304 <div class="infer-row"><span class="sig">Subject: "clinic follow-up"</span><span class="arr">→</span><span class="inf">inferred health condition</span></div> 305 <div class="infer-row"><span class="sig">Tone shift, fewer replies</span><span class="arr">→</span><span class="inf">relationship strain</span></div> 306 </div> 307 <div class="prose"> 308 <p>Whether any given provider runs this kind of analysis today is a policy choice they can change at any time. That it's now <strong>cheap and possible at scale</strong> is the new fact â and the only architecture it can't touch is one where the mail arrives already encrypted, unreadable to the machines that store it.</p> 309 <p>A profile like that isn't a harmless targeting label. It's a standing dataset about a real person's finances, health, and relationships â sitting on a server, one breach, subpoena, or vendor mistake away from becoming someone else's property.</p> 310 </div> 311 </div> 312 </section> 313 314 <!-- ============ CLOSING ============ --> 315 <section style="background:var(--surface);border-bottom:1px solid var(--line);"> 316 <div class="wrap"> 317 <div class="section-head"> 318 <p class="eyebrow">The honest summary</p> 319 <h2>Correspondence should be legible to you. To no one else by default.</h2> 320 </div> 321 <div class="prose"> 322 <p>The point isn't that every free provider is malicious â most of this is standard, disclosed business practice. The point is that "free," "password-protected," and "encrypted" are being used to imply a privacy guarantee that the underlying architecture was never built to make.</p> 323 <p>Confidesk is built the other way round: your mail and files are encrypted in your browser, on your device, and the server only ever holds scrambled data. Your key passphrase isn't identification â it is the lock itself, and only you hold it. That's the whole difference in one line: at an ordinary provider, an administrator sees everything; at Confidesk, an administrator sees nothing. Not even us.</p> 324 </div> 325 </div> 326 </section> 327 328 <!-- ============ FINAL CTA (dark) ============ --> 329 <section class="dark final"> 330 <div class="wrap"> 331 <h2>Private by design â not by promise.</h2> 332 <p>See what email looks like when the provider can't read it â because the passphrase that unlocks it never leaves your device.</p> 333 <div class="btns"> 334 <a class="btn btn-dark" href="/how-confidesk-is-different/">Read: how Confidesk is different</a> 335 <a class="btn btn-outline-light" href="/#compare">Compare with ordinary email</a> 336 </div> 337 </div> 338 </section> 339 340 <!-- ============ FOOTER ============ --> 341 <footer> 342 <div class="wrap foot-bottom">
343 <span>© 2026 Confidesk Limited. Your data stays yours.</span> 344 <span><a href="/">Home</a> · <a href="/privacy-policy/">Privacy</a> · <a href="/terms-of-service/">Terms</a> · <a href="#cookie-settings">Cookie settings</a></span> 345 </div> 346 </footer> 347 348</body> 349</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.