Overview
Cock.li has operated as a public email host since 2013, positioning itself as an anti-surveillance alternative to mainstream providers. The service offers standard IMAP and SMTP access alongside a newer webmail client, with a deliberate focus on keeping registration lightweight and irreverent. Users choose from a variety of unconventional domain names, and the platform currently serves over one million accounts. The operator maintains full ownership of server hardware and funds operations through donations rather than subscriptions or data monetization.
Despite its longevity, cock.li occupies a contested space in the privacy community. The provider's own homepage candidly states that users cannot technically verify its no-reading claims, and third-party trust scores vary dramatically, from medium-risk ratings by scam-detection algorithms to endorsements from long-term users who value its transparency about limitations.
Privacy & KYC
Cock.li qualifies as a Level 1 anonymous service: no name, phone number, or government ID is required to register. The operator explicitly frames this as resistance to the "growing surveillance state." To maximize anonymity, the site recommends accessing it through Tor or a VPN and following basic operational security practices.
- Data collected at registration: email address, hashed password, IP address, user agent, and timestamps
- Retention: 48–72 hours of IMAP and SMTP connection logs; HTTP access logs; mail storage until deleted by user
- Third parties: none, cock.li claims 100% server ownership and no data sales
- Content scanning: automated spam filtering only; no advertising profiling
The privacy policy was last updated in April 2025, notably adding clearer account-deletion instructions. Users should understand that while cock.li does not guarantee storage of any specific data point, it also does not promise to not retain information beyond stated periods. The absence of password reset functionality underscores the service's hands-off approach: lose your credentials, and the mailbox is permanently inaccessible.
Supported assets & payments
Cock.li is free to use, with infrastructure costs covered by user donations. The service accepts Bitcoin and Monero for contributions, aligning with its privacy-centric ethos. No fiat payment rails are mentioned, and there are no tiered subscription plans, every user receives the same feature set regardless of payment status. This donation-only model eliminates the financial KYC exposure that typically accompanies paid email services.
Security & custody
Cock.li operates what can best be described as a trusted-third-party custody model for email content. The provider encrypts data server-side but retains technical capability to access plaintext, as all incoming mail arrives unencrypted before any storage encryption is applied. The homepage is unusually direct about this limitation, advising users to employ X.509 certificates or GPG with correspondents to achieve true end-to-end protection.
- Tor access: multiple onion services available for HTTP, webmail, IMAP, POP, and XMPP
- TLS: enforced where possible; unencrypted relay to non-TLS external servers is noted as a risk
- Server control: wholly owned hardware, no cloud hosting
- Transparency mechanisms: warrant canary, site log, and published terms
The operator's honesty about trust limitations cuts both ways. Privacy advocates note the absence of zero-access architecture or independent cryptographic audits, while supporters argue that cock.li's candor exceeds that of providers making technically unverifiable encryption claims.
Who it's for, verdict
Cock.li suits users who prioritize pseudonymity over polish and accept personal responsibility for email security. It is a practical choice for throwaway accounts, low-sensitivity correspondence, or situations where linking an email to real-world identity creates unacceptable risk. Journalists, researchers, and activists operating in permissive jurisdictions may find the Tor integration and crypto donation path valuable.
However, the service is poorly matched to users requiring guaranteed confidentiality, compliance-grade reliability, or professional presentation. The provocative domain branding may attract unwanted scrutiny, and the lack of password recovery creates irreversible failure modes. For those needing technically enforced provider blindness, modern zero-knowledge alternatives offer stronger cryptographic guarantees, albeit typically with some identity friction cock.li deliberately avoids.
Our 7.4/10 score reflects genuine strengths in accessibility and anti-surveillance positioning, tempered by the unavoidable trust gap and mixed external trust signals. Cock.li delivers exactly what it promises: functional, no-KYC email with no pretense of being something more secure than it is.
