Skip to content

Private webmail client

Valit Mail

A calm, private inbox for valit.site addresses, built on Stalwart and JMAP, that flags login codes the moment they land.

Industry
Email
Our role
Design and full-stack development
Platform
Web
Valit Mail public landing page and sign-in screen in light and dark themes

The goal

A calm, fast inbox for every valit.site address, comfortable on any screen.

The challenge

Keep logins private, show untrusted email safely, and flag login codes the moment they arrive.

How we solved it

A Next.js client that proxies JMAP to a Stalwart mail server that's never exposed to the internet, a sandboxed reader, and a webhook that sends new login codes to Discord.

What we built

  • Arranged your way

    Light, dark or system themes, the reading pane beside the list or full width, comfortable or compact, all remembered on each device.

  • Keyboard first, instant

    j and k to move, e to archive, ? for every shortcut. Read, star, archive and delete update at once, with Undo.

  • Any email, shown safely

    Mail renders in a sandboxed frame: links cleaned, remote images swapped for alt text, scripts never run.

  • Compose in rich text or HTML

    Formatting, links, Cc and Bcc, attachments, and Ctrl Enter to send.

  • At home on a phone

    A full sidebar, a slim icon rail or a drawer on mobile, with desktop notifications and an offline banner.

Valit Mail inbox with quick settings, the light theme and the compose window

A calm inbox, arranged your way.

Quick settings for theme, density and reading pane, one warm-stone palette with Valit navy as the only brand colour, and compose in rich text or HTML.

Valit Mail password reset and support pages, and the settings screen

Locked-down support.

Password-reset and support forms are rate-limited per visitor, and secrets are compared in constant time.

Private by design, loud when it matters.

When a login code lands in any mailbox, that mailbox's Discord channel hears about it in seconds. The webhook always answers 200 and fails closed, so it never holds up mail.

  1. 01

    Stalwart

    Mail is delivered and the webhook fires.

  2. 02

    Valit webhook

    Checks the secret and reads the message.

  3. 03

    Detect

    Spots PUBG and Supercell alerts, codes and links.

  4. 04

    Discord

    Sends an alert to that mailbox's channel.

What shipped

  • A webmail client for valit.site, built on Stalwart over JMAP
  • Inbox, starred, sent, junk and deleted, with custom folders
  • Light, dark and system themes from one warm-stone palette
  • Reading pane beside the list or full width, comfortable or compact
  • Keyboard shortcuts and instant actions with Undo
  • A sandboxed reader that cleans links and blocks remote images
  • Rich text and HTML compose with attachments
  • Login-code alerts sent to Discord for each mailbox
  • Password-reset and support pages, rate-limited per visitor
  • Public landing and sign-in pages, with invite-only accounts

Services

Stack

  • Next.js 16
  • TypeScript
  • Tailwind
  • Zustand
  • React Query
  • JMAP
  • Stalwart

Building something like Valit Mail?

Tell us what you need and we'll tell you honestly how we'd build it.

Book a free call

Next project

Raqam

Shared finance manager
Raqam shared ledgers screen between the bill-splitting and ledger detail screens