Responsible for the processing described here:
Like any web server, this one records each request: the IP address it came from, the time, the page requested, the referring page and the browser's user-agent string. This is necessary to run the service and to defend it against attack (Art. 6(1)(f) GDPR — legitimate interest). These logs are rotated and are not used to build a profile of anyone.
Starting the demo creates a throwaway account with a randomly generated address. You are not asked for a name, an email address or a password, and none is stored. Anything you type into it — messages, drafts, calendar entries — exists only in that account and is deleted with it, automatically, about 2 h after it was created. Mail written in the demo is never sent: there is no connection to any mail server.
To see how much the demo is used, each demo session that is started is counted. What is stored is the time and a keyed hash of the IP address with its last part cut off (the last octet of an IPv4 address, the last 80 bits of an IPv6 one) — never the address itself. The hash shows only that two sessions came from the same network, and it is deleted after 30 days (Art. 6(1)(f) GDPR — legitimate interest in knowing how much the demo is used).
Three cookies are set, all of them strictly necessary to operate the service. There is no tracking, advertising or analytics cookie, and therefore no consent banner.
PHPSESSID — keeps you signed in to your demo account. Deleted when you close the browser.plmail_ui — remembers the theme and language you picked.mercureAuthorization — keeps the live-update connection open while you are signed in.No data is passed to third parties. This site loads no external fonts, scripts, maps or analytics — its content security policy allows connections to this server only.
The server is operated on our behalf by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, acting as a processor under a data processing agreement.
You have the right to information about the data held about you, and to its correction, erasure or restriction, as well as the right to object to processing and the right to data portability. Write to the address above.
You also have the right to lodge a complaint with a data protection supervisory authority.