# Privacy

> Which data this website processes, which data the mail service stores, and for how long.

## This website

The website is static and contains no JavaScript, cookies, tracking or advertising. Fonts, images and styles come from our own server; the browser does not load embedded third-party resources.

When a page is requested, the server processes the IP address and HTTP request to deliver it. Access logging is not enabled in Caddy. There are no website statistics, including aggregated visitor analytics. The website itself has no forms, no registration and no customer accounts.

System and security logs are kept for server operations. These may include IP addresses from failed administrator sign-ins. The system journal is limited to seven days.

## Responsible entity and contact

The entity responsible for this website is **patchletter UG (haftungsbeschränkt)**, Meisterweg 16, 45896 Gelsenkirchen, Germany, represented by managing director Kolja Sagorski. For questions about data processing: [legal@patchletter.com](mailto:legal@patchletter.com). General contact: [hello@patchletter.com](mailto:hello@patchletter.com), telephone +49 209 73085753. Further operator details are in the [imprint](https://privymail.eu/en/legal.md).

## The mail service

We store only what the service needs. There is no advertising, no tracking and no profiling.

| Data | Purpose | Retention |
|---|---|---|
| Mail, attachments, contacts, calendars | providing the service | until you delete; 30 days after cancellation |
| Account data | sign-in and contract | contract term plus 30 days |
| Login logs with IP address | security and abuse prevention | 7 days at most |
| SMTP logs without content | delivery and troubleshooting | 14 days at most |
| Abuse cases | spam and fraud prevention | 90 days at most |
| Invoices | statutory retention | statutory period |
| Backups | recovery | 30 days rolling and encrypted |

## Deletion and your rights

You handle access, export, correction and deletion in your account settings. For anything else, reach us at the addresses above.

When data is deleted, we first remove the associated keys; the encrypted data can then no longer be read. Stored copies are deleted within the periods listed.

---

- This page as HTML: https://privymail.eu/en/privacy/
- Deutsche Fassung: https://privymail.eu/privacy.md