A short and exact list of what is kept on our servers, why, and for how long. No phrases like "certain technical data".
Messages are stored on the server disk as they arrived, until you delete them. They are not encrypted with your own key — that would cost you search and webmail access. We say the consequence plainly: a server administrator is technically able to read mail, and the only protection is our commitment not to, plus a log that records every check that is made.
We do not read your mail, do not analyse its contents and do not select advertising from it.
A recovery request records what the applicant answered and whether it matched. The subjects of messages and the names of folders are neither stored nor shown to a person: the comparison is done by software, which answers only yes or no.
While there is no advertising on the site we set exactly one cookie, a session cookie, and only after you sign in. It exists so you do not retype your password on every page, and under the law it needs no consent. When advertising arrives, a real choice will appear here — not a box with one button.
The service is paid for by advertising, and we say so openly. Advertising is not selected from the contents of your mail.
The servers are in Switzerland and the European Union and we operate under the GDPR. You may obtain a copy of your data, correct it, delete the mailbox entirely and object to processing. Write to us and we will answer within 30 days.
Our servers sit in two countries and we name both. In Zurich, our own nameserver on a Swiss address: it serves DNS and holds neither mail nor files. In France, in the European Union, a dedicated server — and that is where the mail and the site files live.
We separate these on purpose. "Servers in Switzerland" sounds good, but your correspondence physically sits in France, and that is what should be said.
The controller is the owner of the service: Andrew A. Valerievich — private individual (self-employed), 57-59 Broad St, Bristol BS37 6AD, England. The same details are repeated in the imprint, linked at the foot of this page.
The service has no separate data protection officer — the team is small. Send requests for a copy of your data, for correction or for deletion through the contact form, topic «Personal data»: we answer within one month, as the GDPR requires.