Your data belongs to you.
Not us. Not them. No one.

Every Myximus mailbox is encrypted on disk using Dovecot's mail-crypt plugin with per-user EC keys (secp521r1). Your key is generated from your password at account creation and never stored in plaintext. The mailbox on disk is ciphertext. Without your password — even with full server access, even with root — the stored mail cannot be read. We verified this: accessing an encrypted mailbox without the password returns "Private key not available."

We run our own mail infrastructure: Postfix for sending, Dovecot for storage, Roundcube for the web interface. No Microsoft, no Google, no relay through any third party. Email travels encrypted in transit (TLS enforced). Email at rest is encrypted per-user. If you reset your password, a new key is generated — old mail encrypted under the old key cannot be recovered. That's not a limitation. That's the guarantee.

We want to be precise about what this means: incoming email is plaintext during delivery, and webmail decrypts server-side during your active session. This is encryption at rest — the strongest protection against stolen hardware, compromised backups, and physical server seizure. True end-to-end encryption (where even active sessions are opaque to the server) is a larger project on our roadmap.

Myximus Vault runs on Vaultwarden — a self-hosted implementation of the Bitwarden protocol, which is open source and independently audited. Your master password never leaves your device. All encryption and decryption happens locally in your browser or app.

What we store on our server is an encrypted blob. Without your master password, it's meaningless data. We cannot decrypt it. Law enforcement cannot ask us to decrypt it. It is mathematically locked to you.

Every search you run on Myximus goes through SearXNG — an open-source metasearch engine running entirely on our server. When you search, SearXNG queries multiple sources on your behalf, aggregates the results, and returns them to you. The sources never see your IP address. We never log your queries. There is no profile being built.

Compare that to Google, where every search is stored, associated with your account, used to build an advertising profile, and retained indefinitely. On Myximus Search, by the time results appear on your screen, the query is already gone.

Most websites load 10–30 third-party scripts the moment you visit — analytics, advertising pixels, social tracking buttons, chat widgets. Each one is a company watching you browse. We audited every resource on myximus.com and removed all of them.

We use Umami — a self-hosted, cookie-free analytics tool that runs on our own server. It tells us how many people visit and which pages are popular. It doesn't know who you are, doesn't set cookies, and doesn't share data with anyone. We use it to improve the product, not to profile users.

Policies can be ignored. Architecture cannot. We made deliberate choices at every layer of the stack so that security is the default, not something that depends on the right person following the right procedure.

The backend runs as a non-root system user — even if an attacker compromises the application, they cannot access system files. Rate limiting is enforced at the nginx layer before requests reach any code. Our DNS has a CAA record that restricts SSL certificate issuance to Let's Encrypt only — no certificate authority can issue a fraudulent cert for myximus.com. Vaultwarden is pinned to a specific version with all known CVEs resolved.

When you reset your password, we don't store the reset token — we store a SHA-256 hash of it. The token itself only ever lives in the email we send you. It expires in 15 minutes and cannot be used twice. Your recovery email is encrypted in our database using AES-256-GCM — we store the ciphertext, not your backup address in plaintext.

The password reset process updates your mailbox credentials through a locked privilege-separation helper — a root-owned script that does exactly one thing and can be audited line by line. The application layer never touches system files directly.

We run nightly backups at 3am UTC — Postgres database, Docker volumes, and all service data — with 7-day retention. DigitalOcean runs weekly automated snapshots as an independent layer. We verify backup integrity after each run.

More importantly: your data is portable. If you ever want to leave Myximus, we will help you export everything. Your vault exports to the standard Bitwarden format, readable by dozens of apps. Your email exports to standard IMAP. Your documents export to open formats. We don't believe in lock-in. A product that keeps users by making it hard to leave isn't a product people chose — it's a trap.