Mail Solo
One encrypted mailbox on your own @ice.io address. Nothing else attached.
- 1 address + 10 aliases
- 15 GB encrypted storage
- Full tracker stripping
- IMAP & SMTP bridge
02 · MAILSecure Email — waitlist openMail that nobody
Mail that nobody
reads but you.
Free mail is paid for with your correspondence. ION Mail encrypts every message end-to-end and at rest, with keys generated on your device — we could not hand over your inbox if we were asked to.
INBOX · you@ice.io0TRACKERS STRIPPED
- Anna KesslerRe: apartment viewing3 trackers
- NotionYour weekly digest7 trackers
- Tomás RuizInvoice — March2 trackers
- Delta Air LinesYour boarding pass11 trackers
- FigmaSomeone commented5 trackers
- Dr. HalvorsenResults are in1 trackers
0ADS SERVED
100%MESSAGES ENCRYPTED AT REST
1,284/dayTRACKERS STRIPPED PER USER
0KEYS WE HOLD
[ WHAT FREE MAIL ACTUALLY COSTS ]
Your inbox is the most complete file anyone holds on you
Every receipt, every ticket, every medical result, every conversation you ever meant to keep private — filed, indexed and searchable in one place. Free providers read that file to sell against it. Senders embed pixels to know the second you opened it. And the whole archive sits on a server whose operator holds the key.
SCANNED
Message contents parsed for interests, purchases, travel and life events.
PIXEL-TRACKED
A 1×1 image tells the sender when you opened it, where, and on what.
SERVER-SIDE KEYS
"Encrypted at rest" means little when the provider holds the key.
LOCKED IN
Your address belongs to their domain, so leaving costs you your identity.
ONE ORDINARY NEWSLETTER11 TRACKERS
Open pixelreports time & device
Geo beaconapproximates your city
Link wrappers ×6every click logged
Remote CSSre-opens counted
Forwarding beacondetects re-sends
In ION Mail: all eleven removed before the message renders. The sender learns nothing — not even that it arrived.
[ THE ARCHITECTURE ]
The key is made on your device and stays there
Sealing happens before anything is transmitted. What reaches our servers is ciphertext with a routing header — and that is genuinely all we have.
PLAIN TEXT → SEALEDYOUR KEY · YOUR DEVICE · ALWAYS
- DRAFTRe: apartment viewing
- BODYTuesday at six works —
- FILEcontract-signed.pdf
- TOanna@example.com
SEALED ON DEVICE
- 9f2c 44e1subject unreadable
- c081 7ee9body unreadable
- 4a77 e2c0attachment sealed
- b3e5 08cfrouting header only
01Keys generated locally
Your keypair is derived on first launch and never transmitted. Recovery uses a phrase only you hold — there is no reset link that could hand your mail to someone else.
02Sealed in transit and at rest
Messages between ION addresses are end-to-end encrypted automatically. Mail from the outside world is sealed to your key the moment it lands, before it is written to disk.
03Search without exposure
A local encrypted index makes your archive fully searchable on your device. The server never receives a query and never learns a term.
[ WHAT YOU GET ]
Private, and still a pleasure to use
TRACKER STRIPPING
Senders stop learning things about you
Every incoming message is cleaned before it renders: open pixels removed, remote content proxied, link wrappers unwound to their real destination. You read the mail. The sender learns nothing — not when you opened it, not where you were, not what you clicked.
Open pixels stripped — read receipts you never agreed to simply don't fire
Links unwrapped — see and go to the actual URL, not a click-tracking redirect
Remote content proxied — images load without exposing your IP or device
THIS MONTH● LIVE
38,512TRACKERS REMOVED FROM YOUR MAIL
- 1,284
- OPEN PIXELS
- 6,910
- LINK WRAPPERS
- 402
- GEO BEACONS
ALIASES & BURNERS
A different address for everyone who asks
Generate an alias per service in one tap. All of them land in the same inbox, tagged by origin. When one starts receiving spam you know exactly who sold it — and you burn that address without touching the rest of your life.
Unlimited aliases — one per service, generated in a tap
Leak attribution — spam on an alias names the company that leaked it
Burn without collateral — kill one address, keep everything else running
ALIASESUNLIMITED
shop.a7f2@ice.ioretail · 41 msgs
news.9c0b@ice.ionewsletters · 212
signup.4e18@ice.ioleaked · burn it
bank.b331@ice.iofinance · 8 msgs
+ generate a fresh alias for the next signup
NO AD MODEL
Nothing to gain from reading you
The business model is the privacy policy. ION Mail is paid for by subscription, bundled with the rest of the stack — there is no advertising product on the other side of the company that would benefit from your inbox, and so there is no pressure to build one.
No content scanning — technically impossible, not merely against policy
No profile building — no interest graph, no purchase history, no ad ID
Export any time — standard formats, no lock-in beyond your own keys
WHAT OUR SERVERS CAN SEE● AUDITED
Message subjectciphertext
Message bodyciphertext
Attachmentsciphertext
Search queriesnever sent
Contact graphnot indexed
Delivery enveloperequired by SMTP
[ YOUR ADDRESS ]
Short names go first. Founding members pick before launch.
Every waitlist member reserves their handle in join order, on @ice.io or @online.io — or points a domain you already own at ION and keeps the address you've had for years.
- @ice.io
- @online.io
- yourdomain.com
HANDLE AVAILABILITYCHECKING…
alex@ice.io
ALEX@ICE.IO IS AVAILABLE
- a@ice.ioclaimed 2 hrs ago
- io@ice.ioclaimed yesterday
- zero@ice.ioclaimed 4 days ago
- mail@ice.ioreserved
[ COMPARE ]
Where the other inboxes draw the line
| Feature comparison | Free webmail | Privacy-first webmail | ION Mail |
|---|---|---|---|
| Business model | Advertising | Subscription | Subscription, bundled |
| Content scanning | Yes, by design | No | Not possible |
| Who holds the key | The provider | Mixed | You, on device |
| Tracker stripping | Partial, opt-in | Partial | Default, full |
| Aliases | Limited | Paid add-on | Unlimited, included |
| Encrypted local search | Server-side | Limited | Full archive |
| Rest of the stack | — | VPN upsold | VPN, browser, vault included |
| Founding price | "Free" | $4–8 / mo | $9 / mo for all six |
[ SWITCHING ]
Moving fifteen years of mail takes an afternoon
01Connect the old inbox
One OAuth or IMAP connection to Gmail, Outlook, Yahoo or anything else that speaks IMAP.
02Import, sealed on arrival
Every message and folder is copied across and encrypted to your key as it lands. Labels survive.
03Forward for as long as you like
Old address keeps forwarding while you update accounts at your own pace. No hard cutover.
04Contacts follow
An address-change notice goes out to the people you actually correspond with — nobody else.
[ PRICING ]
Founding pricing, locked for a year
Join before launch and every price below is half of what it becomes on release day — for twelve months, on any plan.
50% OFF · WAITLIST OPEN
The Stack
All six products on one account — mail, VPN, browser, vault, proxies and agent access.
- Unlimited aliases
- 50 GB encrypted storage
- Custom domain support
- VPN + Browser + Vault included
- 5 GB of proxy traffic monthly
Household
The full stack for up to six people, each with their own address and vault.
- 6 addresses, 300 GB pooled
- Everything in The Stack
- Family domain on one bill
- Shared vault collections
30-day refund · Export your archive whenever you like
[ FAQ ]
Questions people actually ask
You recover with a phrase generated at signup, which you keep somewhere safe — and which we never see. That is the honest trade: real end-to-end encryption means no support agent can reset your way back in. Lose both the password and the phrase and the archive stays sealed, including from us.
Between ION addresses, end-to-end automatically. To an outside address, the message travels over TLS like normal mail and is sealed to your key in your own archive — so your copy is protected even though their provider handles theirs. If your recipient publishes a PGP key, ION uses it without you doing anything.
Yes. Point a domain you own at ION and your existing address keeps working, now sealed to your key. Or take an @ice.io or @online.io handle and use both — every alias lands in the same inbox.
A local bridge exposes standard IMAP and SMTP to Apple Mail, Thunderbird, Outlook and anything else, decrypting on your machine only. There are also native ION apps for macOS, Windows, iOS and Android, plus a web client.
Your archive is exportable at any time in standard formats you can import elsewhere, and your keys are yours already. The lock-in is limited to whatever your own domain settings say — which is to say, none.
Filtering runs on your device against the decrypted message, and on the envelope metadata SMTP requires anyway — sender reputation, authentication records, delivery patterns. The classifier improves from your actions locally; the training never leaves the machine.
Mail rolls out to the waitlist in join order after the VPN cohort, with handles reserved from the day you sign up and founding pricing locked for twelve months.
[ 02 · MAIL ]
Take your name before someone else does
Founding pricing across all six products, and your pick of @ice.io addresses before they go.
One launch email, no spam