CTemplar

» see ctemplar.com as it lived, on the wayback machine

~ the obit ~

CTemplar sold a threat model. The front page led with Icelandic privacy law and the signup form did not ask for a name. There was an onion address for anyone who wanted to reach the mailbox without touching the normal web. I have never needed any of that from an email provider. Knowing that about yourself is a comfort you did not earn, and the people who did need it were the entire customer base.

The service came out of Reykjavik in 2018. In May of that year the domain still answered with a single line of text, "CTemplar: High quality encrypted email for everybody!", and nothing behind it. A year later it was a working encrypted mailbox with builds for every desktop platform, plus an F-Droid package for people who would not install from Google Play. The product had a brand name for its security model. Armored Email, with something called four-wall protection and a shield in the logo.

On 26 April 2022 the company published a notice on its own site under the title "CTemplar is shutting down". It runs four short paragraphs. It explains how to export your contact list, it tells you to move your mail out by 26 May or lose it, and it signs off from the CTemplar Team. Nowhere does it say why. Four years later that notice is gone from the live site and the site that published it is still taking signups.

~ the rap sheet ~

~ the pitch ~

The jurisdiction was the product. Iceland had the reputation, the data-protection law and the post-2008 appetite for hosting things other countries found inconvenient, and CTemplar put all of it on the homepage. The copy promised that nothing could be made to reveal personal data because no personal data was stockpiled in the first place. That is a strong claim for an email service to make, and it was never possible to audit from the outside.

The corporate paperwork in the footer told a more complicated story than the marketing above it. The Icelandic operating entity was Orange Project ehf, at an address on Ármúla in Reykjavik. The copyright line named Templar Software Systems Ltd., a Seychelles limited liability company. A privacy business selling one country's legal protections while incorporating in another is not unusual in that trade, and it is worth reading the footer of any service that sells you a jurisdiction.

~ the day it died ~

The sentence is plain: "CTemplar is closing and the last day of operation for this email service will be on May 26 of 2022." Users got thirty days. The instructions pointed at the contacts export inside the web client and promised that per-account mail backups would be generated and posted "within a day or two". Reporting at the time noted that the closure followed a system failure the previous year in which some customer data was lost for good, and the company never connected the two events, or any two events, in public.

~ what is still standing ~

Today ctemplar.com answers 200. The homepage still reads "Armored Email. Because privacy is a human right worth fighting for!" The blog still carries posts about Android permissions and cyber warfare, frozen mid-2022, with the Ukraine war described as current. The footer copyright now says 2026, because a template renders the year from a clock, and the Seychelles line has been dropped from it.

The one address that does not resolve is ctemplar.com/ctemplar-is-shutting-down. It returns a 404 page offering to sell you an anonymous encrypted email account. The farewell survives in the Internet Archive and nowhere else, which makes this a tidy inversion of the usual pattern: most dead services leave a tombstone and lose the product, while this one kept the storefront running for four years and deleted the death certificate.

@}-->--

              )
             (_)
            .-'-.
            |   |
            |   |
            |   |
            |   |
          __|   |__   .-.
       .-'  |   |  `-:   :
      :     `---'     :-'
       `-._       _.-'
           '""""""

« previous  ·  random  ·  next »