Privacy Architecture
The Mullvad Model for Email
Why VaelMail adopted the 16-digit account number and prepaid voucher architecture, and how mathematical anonymity replaces traditional password reset backdoors.
Architecture Breakdown
In the VPN industry, Mullvad proved that the only foolproof defense against data breaches and subpoena requests is simple: never collect personal identifiers in the first place.
Traditional email providers ask for a username, a recovery email, and a phone number. If law enforcement or an attacker targets the account, the recovery flow acts as an administrative backdoor. VaelMail brings the Mullvad architecture to electronic mail.
| Principle | Traditional Email Providers | VaelMail (Mullvad Model) |
|---|---|---|
| Account Identifier | Username tied to real name, phone number, and recovery email address. | Random 16-digit number generated client-side (e.g. 4829 1048 2910 4820). |
| Recovery Mechanism | “Forgot password?” link sent to external email, SMS code, or identity documents. | 12-word cryptographic seed phrase (BIP39). If lost, no one can restore the account. |
| Billing Architecture | Recurring credit card subscriptions with billing name, address, and token stored in Stripe/Braintree. | Prepaid time blocks (1, 3, 6, 12 months) via non-custodial crypto. No auto-rebilling, no stored cards. |
| Account Expiration | Silent data harvesting or account suspension with debt collection risks. | Clean expiration grace period. Mailbox holds safely, then cleanly retires if not extended. |
| Subpoena Defense | Provider hands over billing names, recovery phone numbers, and login IP logs. | Nothing to hand over. The server holds zero names, zero phone numbers, and zero IP logs. |
1. The Random Account Number
When you click “Create Account” on VaelMail, the server generates a 16-digit numeric identifier. You do not enter an initial username, password, or security question.
This account number is your primary credential. You can write it down or store it in your password manager. Because the number contains zero linguistic data, it cannot be linked to your identity across search engines or social media.
2. No “Forgot Password” Backdoors
On standard web services, password recovery is the primary vector for SIM-swapping, social engineering, and court orders. An attacker who gains access to your recovery phone number can seize your inbox in minutes.
VaelMail does not possess a password reset pipeline. Account ownership is proven cryptographically using your 12-word seed phrase or WebAuthn hardware token. We cannot reset your account, and neither can any third party.
3. Prepaid Time Vouchers
VaelMail does not store credit card tokens or mandate recurring payments. When you upgrade to Vael Plus (for sending capability, custom domain hosting, and additional storage), you purchase prepaid time:
- 1 Month: $4.00 in cryptocurrency
- 3 Months: $11.00 in cryptocurrency
- 6 Months: $20.00 in cryptocurrency
- 1 Year: $36.00 in cryptocurrency ($3.00/mo)
When your time expires, your mailbox pauses into a grace period. You can top up time whenever you choose.
Experience the Mullvad model for email
Generate your 16-digit account number right now. No signup forms or verification delays.