Privacy policy

1. Controller

The controller for data processing on this website is the operator of MailTester named in the imprint. You can reach us using the contact details given there.

2. What we process when you send a test mail

When you send an e-mail to a test address at in.mailtester.x1.ax, we store:

• the complete content of the e-mail including all headers, text, images, links and attachments,
• the IP address and HELO name of the server that delivered the mail,
• the envelope sender, time of receipt, size and TLS version used,
• the result of our analysis.

The mail may contain personal data, e.g. names and addresses in the sender, recipient or text. Where possible, please send test mails without real recipient data.

3. Purpose and legal basis

We process this data solely to show you the analysis of your mail. The legal basis is Art. 6(1)(b) GDPR (providing the service you requested) and Art. 6(1)(f) GDPR (our legitimate interest in secure operation free of abuse).

4. What happens during the analysis

For the checks we query public DNS records (e.g. SPF, DKIM, DMARC, reverse DNS). We look up the IP address of the sending server and domains contained in the mail on public blacklists (DNSBL); their operators thereby learn the queried IP address or domain. We fetch links from the mail once to check whether they are reachable. The mail itself is never forwarded or sent to third parties.

5. Retention and deletion

The mail and the analysis are deleted automatically and completely after 7 days. You can delete a test immediately at any time using the “Delete test now” button on the result page; this removes the stored mail and the analysis from our database. A new mail to the same address replaces the previous test.

6. Who can see the result

Results are not password-protected. Anyone who knows the random test address or the link to the result page can view the result including the mail. Only share the link with people who are meant to see it. Result pages are blocked for search engines.

7. Visiting the website and technical logs

When you open our pages, the web server processes technically necessary data (IP address, time, requested page, browser identification) in order to deliver the page. The legal basis is Art. 6(1)(f) GDPR.

The web server and the mail server keep short-lived technical logs (operational logs) so that faults and abuse can be detected. These logs are stored separately from the test data and are overwritten automatically after a short time. By default, our application logs contain no full IP addresses and no test ids.

8. Cookies, tracking and third parties

We use no tracking, no analytics, no advertising and embed no third-party content (no external fonts, scripts or images). When you switch the language, we store your choice in a technically necessary cookie (“lang”) that contains nothing else. The only exception regarding third-party content: if you explicitly choose “Load remote images” in the mail preview, your browser loads the images linked in your mail from the servers given there.

9. Server location

The service is operated on servers in the European Union.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). The quickest way to erase a test is to delete it yourself on the result page. You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).