Privacy policy
How we process your data
This covers visits, contact, and accounts. Mail content you send for others is covered by the DPA.
Last updated 2026-09-20.
Controller
Controller for account data is PineCore Systems, a trading name of Bröderna Saxin AB, company registration number 559379-4364, Lindesby 152, 713 94 Nora.
Write to [email protected]. You do not need an account to contact us.
Account
An account stores your email, name, password hash, sessions, and — if you enable it — authenticator secret and recovery codes. Legal basis is the contract for the account and our legitimate interest in protecting it. Sessions last at most seven days.
Mail you send and receive
Messages, attachments, recipients, subjects, and delivery events are stored to provide the service you asked for. For that processing you are the controller and we are the processor; see the DPA. Content is stored on the server in Helsinki.
Cookies and measurement
Sign-in uses necessary security cookies. No third-party analytics, no embedded social widgets. See cookies.
Who processes data for us
Hetzner Online GmbH, dedicated server in Helsinki, EU. All persisted application data stays there.
Cloudflare terminates TLS and processes technical data in transit under standard contractual clauses.
Amazon SES (AWS EMEA) in Stockholm for outbound and Ireland for inbound. Relay only; content is stored on the Helsinki server. AWS DPA.
The public list is on /subprocessors.
Your rights
You have the right of access, rectification, erasure, objection, and restriction. You may complain to Integritetsskyddsmyndigheten (imy.se). Write to us first if you can.