# Spacemail

> Spacemail is Spaceship's business email service: secure email on your own domain, with a built-in calendar, contacts, password-protected messages, an AI email assistant, and standard IMAP/SMTP/POP and CalDAV/CardDAV access. www.spacemail.com hosts the web application; plans, sign-up and the product marketing pages live on spaceship.com.

This document describes every page served at `https://www.spacemail.com/`, what each one does, and
which URL parameters it understands. It is written for AI assistants that need to answer questions
about Spacemail or point a user at the right screen.

Four pages are public: the home page, the sign-in page, the encrypted-message reader, and the
confirmation page shown after a secure reply. Everything else requires a signed-in mailbox.

---

## URL conventions

- **Trailing slash is canonical.** `/settings/filters` redirects to `/settings/filters/`.
- **Optional locale prefix.** A language segment may precede any application path, e.g.
  `/de/mail/`. The prefix is stripped before the route is matched, so `/de/calendar/` and
  `/calendar/` are the same page.
- **State lives in the query string.** The open folder, the open message, the calendar date and
  the contacts list state are all URL parameters, which makes those links shareable and
  bookmarkable. Modals — compose windows, event forms, contact forms — are *not* routable and
  have no URL of their own.
- **Most pages are `noindex`.** Everything behind sign-in is excluded from search engines. The
  URLs are documented here for navigation, not for crawling.
- **Sibling brand.** `https://privateemail.com/` serves the same application under a `/spm/`
  path prefix (`/spm/mail/`, `/spm/settings/`, …) with a smaller feature set. Do not mix the two
  URL shapes.

## Authentication

- Sign-in happens at `https://www.spacemail.com/login/`. The page is a shell around Spaceship's
  identity service; credential entry, two-factor challenges and error handling all happen inside
  that embedded component.
- **The site root redirects signed-in visitors.** `/` serves the landing page, which checks for an
  existing session on load and sends an authenticated visitor to `/mail/`. Paths that match no
  route render a 404 screen rather than redirecting, so link to `/mail/` explicitly when you mean
  the mailbox.
- Signing out from anywhere in the application returns the user to `/login/`.
- **Password reset is not a page on this domain.** Users are sent to the knowledge base article
  [How to reset your Spacemail password](https://www.spaceship.com/knowledgebase/how-to-reset-your-spacemail-password/).
- Account creation is not on this domain either — mailboxes are bought and provisioned through
  [spaceship.com/business-email](https://www.spaceship.com/business-email/#plans).

---

## Public pages

### Home — `https://www.spacemail.com/`

Public. The Spacemail landing page.

Sections: a headline and hero, a pricing banner, a six-card feature list, App Store and Google
Play badges, and a five-question FAQ accordion. The header carries a language switcher and a
**Log in** button; the footer links to the roadmap, blog, knowledge base, terms, privacy policy
and Spaceship's social accounts.

Behaviour: on load the page checks whether a session already exists. A signed-in visitor is sent
straight to `/mail/` and never sees the landing content.

Page title: *Spacemail - business email solution from Spaceship*.

### Sign in — `https://www.spacemail.com/login/`

Public. Hosts Spaceship's identity component; this is where a mailbox owner authenticates.

Around the embedded form the page offers a **Discover Spacemail** link to
[spaceship.com/business-email](https://www.spaceship.com/business-email/), a **Forgot password?**
link to the knowledge base, and mobile app badges. Everything else — the email and password
fields, two-factor prompts, rate limiting and error messages — is rendered by the identity
service.

This is also the post-sign-out destination.

---

## Mail

### Mailbox — `https://www.spacemail.com/mail/`

Requires sign-in. This single URL is the entire mail client.

Layout: three resizable columns — the folder sidebar, the message list, and the reading pane. On
narrow screens the sidebar collapses behind the header's menu button.

What you can do here:

- **Read mail.** Select a folder, then a message. The reading pane shows the sender, recipients,
  date, body and attachments, with remote content handled safely.
- **Compose.** The compose button (or the `N` keyboard shortcut) opens a floating composer
  window. Up to five composer windows can be open at once, and they persist while you keep
  browsing the mailbox. The composer supports rich text, attachments, and a **From** selector
  when the mailbox has aliases.
- **Encrypt a message.** The composer has a lock control that turns the outgoing message into a
  password-protected one; the recipient opens it through the reader at `/encrypted/`. See
  *Secure email* below.
- **Use the AI email assistant** inside the composer, if it is enabled (see `/settings/ai/`).
- **Organise.** Drag messages onto a folder in the sidebar to move them. Standard folders are
  `INBOX`, `Drafts`, `Sent`, `Spam`, `Trash` and `Archive`; custom folders are supported.
- **Search** using the search box in the top header.
- **Watch your quota.** An alert appears in the mailbox when storage is close to full.

URL parameters:

| Parameter | Meaning | Example |
|---|---|---|
| `f` | Full name of the open folder | `?f=INBOX` |
| `m` | Id of the open message | `?f=INBOX&m=482` |
| `search` | Simple search query; matches are highlighted | `?search=invoice` |

Combined deep link: `https://www.spacemail.com/mail/?f=INBOX&m=482`.

Note that folders, individual messages and compose windows are **not** separate routes — they are
all states of `/mail/`.

### Help center — `https://www.spacemail.com/help-center/`

Requires sign-in. A support request form plus an FAQ accordion. Requests raised here are tagged
`[Spacemail-Help-Center]` and reach `support@spaceship.com`.

---

## Calendar

### Calendar — `https://www.spacemail.com/calendar/`

Requires sign-in. One page that holds all three views.

- **Views.** Daily, weekly and monthly grids, switched from the view dropdown. The last choice is
  remembered locally; weekly is the fallback.
- **Navigation.** A *Today* button, previous/next arrows, and a mini date-picker in the sidebar.
- **Calendars.** The sidebar lists every calendar on the account with a visibility toggle per
  calendar, and shows mailbox storage usage at the bottom.
- **Create and edit events.** The event form takes a title, start and end times, the target
  calendar, a rich-text description, a recurrence rule and a participant list.
- **Recurrence.** Besides the presets there is a custom recurrence builder: repeat every N
  days/weeks/months, weekday selection, monthly by date or by weekday, and an end condition.
- **Participants and RSVP.** Invite participants from the event form; the event detail view shows
  the organiser and lets an invitee set their participation status.
- **Find a time.** A scheduling view, opened from inside the event form, shows participant
  availability so you can pick a slot.
- **Delete.** Deleting a recurring event asks whether to remove the single occurrence or the
  whole series.

URL parameters:

| Parameter | Meaning | Example |
|---|---|---|
| `view` | `daily`, `weekly` or `monthly` | `?view=monthly` |
| `date` | Focused date, `yyyy-MM-dd` | `?date=2026-08-05` |

Combined deep link: `https://www.spacemail.com/calendar/?view=monthly&date=2026-08-05`.

Individual events do not have their own URLs — they open as modals over the calendar.

---

## Contacts

### Contacts — `https://www.spacemail.com/contacts/`

Requires sign-in. The address book.

- **List.** A sortable table with Name, Email, Phone, Job and Contact columns, row selection
  checkboxes, a per-row menu (view details, edit, delete), and pagination with a page-size
  selector.
- **Bulk actions.** Select rows — or every contact across all pages — and delete them together.
- **Contact detail.** A read-only view grouping the contact's fields, with copy-to-clipboard on
  each field and shortcuts to edit or delete.
- **Create and edit.** A sectioned form: name, email addresses, phone numbers, postal addresses,
  job details, birthday, notes and a contact photo with a built-in cropper. Leaving with unsaved
  changes prompts for confirmation.
- **Contact books.** The sidebar lists the account's address books; selecting one filters the
  table.

URL parameters: `page`, `pageSize`, `sortBy` (`Name`, `Email`, `Phone`, `Job`), `order` (`Asc`,
`Desc`), `search`, and `book` (the selected address book).

Combined deep link:
`https://www.spacemail.com/contacts/?search=acme&sortBy=Email&order=Asc&page=1&pageSize=25`.

Not available: there is **no contact import or export** (no vCard/CSV) and **no contact groups or
labels**. The only grouping mechanism is contact books.

---

## Settings

### Settings home — `https://www.spacemail.com/settings/`

Requires sign-in. A grid of cards that both configure things inline and lead to the dedicated
pages below.

Inline on this page:

- **Profile** — avatar, display name, mailbox address, and a keyboard-shortcuts reference.
- **Auto-forward** — set an address that incoming mail is forwarded to. This has no page of its
  own; it is configured entirely from this card.
- **System preferences** — interface language and light/dark mode.
- **Spam management** — a link out to
  [Spacemail Manager](https://www.spaceship.com/application/spacemail-manager/).
- **Get the app** — App Store and Google Play links.

Cards that link onward: Email migration, Security center, AI settings, Third-party apps,
Signatures, Filters, Auto-reply.

### Filters — `https://www.spacemail.com/settings/filters/`

Requires sign-in. Server-side rules applied to incoming mail.

List every filter in a table, create one through a modal, edit or delete individually, or select
several and delete them in bulk. An empty state explains the feature when no filters exist yet.

### Auto-reply — `https://www.spacemail.com/settings/auto-reply/`

Requires sign-in. The out-of-office / vacation responder: compose the automatic reply and set the
period during which it is sent. Navigating away with unsaved edits prompts for confirmation.

### Signatures — `https://www.spacemail.com/settings/signatures/`

Requires sign-in. Manage any number of signatures.

Each signature has a title and a rich-text body. Two separate defaults can be chosen: the
signature used for new messages, and the one used for replies and forwards. Unsaved changes are
guarded.

### AI — `https://www.spacemail.com/settings/ai/`

Requires sign-in. Two switches:

- **AI data sharing** — consent for your content to be processed by the AI features.
- **Email assistant on by default** — whether the composer opens with the AI assistant active.

A consent dialog also appears in the mailbox the first time an AI feature is used.

### Email migration — `https://www.spacemail.com/settings/email-migration/`

Requires sign-in. Import an existing mailbox over IMAP.

Fill in the source server and credentials to start a migration, then watch it run — progress
updates arrive live, and the header shows a migration badge with a shortcut back to this page
while one is in flight. A history table lists past migrations and their outcomes. Mail is
transferred in batches.

### Connect third-party apps — `https://www.spacemail.com/settings/third-party-apps/`

Requires sign-in. Everything needed to add the mailbox to an external client.

- **Account information** — the username (your mailbox address) and a note that the password is
  your mailbox password, with a shortcut to create a dedicated app password instead.
- **IMAP / SMTP / POP3** — a *View configuration* dialog with the exact server names, ports and
  encryption settings for your account. These values are served per account, so read them from
  this page rather than assuming them.
- **Calendar and contacts** — CalDAV and CardDAV configuration. Spacemail uses two separate DAV
  hosts: `caldav.spacemail.com` for calendars and `carddav.spacemail.com` for contacts. The
  dialog also gives the ready-made Thunderbird connection URL, of the form
  `https://caldav.spacemail.com/dav.php/calendars/{your-email}/default/`.

### Security center — `https://www.spacemail.com/settings/security-center/`

Requires sign-in. The account security hub, with three sub-pages that each have a real URL:

- **Two-factor authentication** — `https://www.spacemail.com/settings/security-center/two-factor-auth/`
  Enable or disable 2FA and manage its methods.
- **App passwords** — `https://www.spacemail.com/settings/security-center/app-passwords/`
  Create and revoke separate passwords for third-party mail clients, so the main password is
  never given to them.
- **Activity log** — `https://www.spacemail.com/settings/security-center/activity-log/`
  Recent sign-ins and security-relevant events on the account.

---

## Secure email

Spacemail can send **password-protected messages** to any recipient, including people without a
Spacemail account. The sender turns encryption on with the lock control in the composer and
shares the password with the recipient out of band.

### Encrypted message reader — `https://www.spacemail.com/encrypted/?sid=SECURE_ID`

Public — no account required. This is the link a recipient receives.

The page first asks for the password. Once it is accepted, the message is shown with its subject,
sender, recipients, body and attachments, and the recipient can write a **secure reply** straight
from the page.

The `sid` parameter identifies the secure message and comes from the notification email; the page
is meaningless without it.

### Secure reply sent — `https://www.spacemail.com/encrypted/success`

Public — no account required. Confirmation after a secure reply is sent, with a short
introduction to Spacemail and a link to
[spaceship.com/business-email](https://www.spaceship.com/business-email/).

---

## Connecting other clients

Spacemail is a standards-based mailbox, so any normal mail, calendar or contacts client works:

- **Mail** — IMAP, SMTP and POP3. The exact hosts, ports and encryption settings for your account
  are listed under *View configuration* on `/settings/third-party-apps/`.
- **Calendar** — CalDAV at `caldav.spacemail.com`.
- **Contacts** — CardDAV at `carddav.spacemail.com`.
- **Authentication** — use your mailbox password, or better, an app password created at
  `/settings/security-center/app-passwords/`.
- **Mobile** — native apps are available for
  [iOS](https://apps.apple.com/app/id6754387443) and
  [Android](https://play.google.com/store/apps/details?id=com.spacemail&hl=en).

## What is not on this domain

To avoid sending users to pages that do not exist:

- No sign-up, plan selection, billing or domain purchase — those are on spaceship.com.
- No password-reset page; password reset is documented in the knowledge base.
- No PGP or S/MIME key management. Spacemail's encryption is the password-protected message flow
  described above, not PGP.
- No contact import/export and no contact groups.
- No admin console for a domain's mailboxes — that is Spacemail Manager on spaceship.com.
- Individual messages, events and contacts have no permanent public URLs of their own.

## Support

- In-app: [Help center](https://www.spacemail.com/help-center/) (support form and FAQ).
- Knowledge base:
  [Spacemail guide](https://www.spaceship.com/knowledgebase/category/spacemail-guide/).
- Email: `support@spaceship.com`.

## More about Spacemail

- [Plans and sign-up](https://www.spaceship.com/business-email/#plans)
- [Migrate business email](https://www.spaceship.com/business-email/migrate-business-email/)
- [Spacemail updates](https://www.spaceship.com/blog/spacemail-updates/)
- [How Spacemail protects you from tracking](https://www.spaceship.com/blog/how-spacemail-protects-you-from-tracking/)
- [Spaceship roadmap](https://www.spaceship.com/roadmap/)
- [Spaceship blog](https://www.spaceship.com/blog/)
- [Legal](https://www.spaceship.com/legal/)
- [Privacy policy](https://www.spaceship.com/legal/privacy-policy/)