Works everywhere
HTML, React, Astro, WordPress and anything with fetch().
One HTML form, one key, done. Submissions land in your inbox. Servers in the EU, no trackers.
HTML, React, Astro, WordPress and anything with fetch().

0
cookies, trackers and US services
Every submission arrives as a clear, readable email.
30 days
default retention, set per form
DPA, retention periods, data export and proof of consent are built in, not bolted on.
100%
hosting and mail delivery in the EU
256 bit
AES-GCM for stored submissions
0
IP addresses stored
Mailiy runs your form backend: delivery, spam protection and retention. All you do is answer.
Every message lands in your inbox and, if you like, AES-256 encrypted in the dashboard, with CSV export.
See at a glance how many messages arrive and how much spam was blocked.
Up to five confirmed addresses per form. Replies go straight to the sender.
Choose per form how long submissions are kept. After that they are gone for good.
Honeypot, rate limits and allowed domains. If that is not enough, switch on ALTCHA: it works in the browser, with no picture puzzles and no third parties.
No server, no SMTP, no backend code.
Enter your email, click the link. New accounts are created automatically.
<input type="hidden" name="access_key" value="YOUR-KEY">
Copy the public key into a hidden field of your form.
Every submission arrives as an email, optionally followed by a redirect to your thank-you page.
Start for free with one website. Upgrade when you need more websites or deliveries. Every plan includes EU hosting and a DPA.
For one personal website or a first project.
€0€0per month, excl. VAT
Start for freeFor freelancers with a few client sites.
€9€7.50per month, excl. VAT
Ask for DeveloperFor agencies running forms for many clients.
€29€24.17per month, excl. VAT
Ask for AgencyFor large agencies and companies.
€59€49.17per month, excl. VAT
Ask for Agency PlusNeed more than 100 websites or 30,000 deliveries? Ask for a custom plan
No. The key is public and belongs in your source code. It only allows submitting to your form. Use allowed domains to limit which websites can do so.
Yes. Mailiy processes personal data on your behalf, so you need a DPA under GDPR Art. 28. You conclude it with a checkbox when you sign up; the text is under “DPA”.
On a Linux server in a data centre in the EU. Mailiy uses no external CDNs, fonts or analytics.
Further submissions that month are rejected with a clear error message. The quota resets at the start of each month.
Yes. Mailiy is a plain HTTP endpoint. Anything that can submit a form or call fetch() works.
Your own sender domain, self-hosting or high volumes: we'll find a setup that fits your privacy concept.