Privacy policy

Controller

EVOQS GmbH, Angerlohstr. 48a, 80997 München, Germany, is the controller for this website within the meaning of the General Data Protection Regulation (GDPR). Questions about this policy go to info@mailypoppins.com.

The mailypoppins software

mailypoppins runs entirely on your own computer. It connects directly from your computer to the mail provider you configure, such as Microsoft 365, Proton Mail Bridge or any IMAP and SMTP server. EVOQS GmbH operates no server in that path and receives none of your mail, contacts, calendar data, passwords or access tokens.

Your messages, drafts and settings are stored as files and a local database on your computer. Passwords and access tokens are stored encrypted on your computer or in your operating system's keychain. Deleting the mailypoppins data and configuration folders removes all of it.

mailypoppins sends no telemetry, analytics or crash reports. HTML messages are displayed with remote content blocked, so opening a message does not tell its sender that you read it.

Signing in with a Microsoft account

When you add a Microsoft 365 or Outlook.com account, mailypoppins signs you in through Microsoft's own sign-in page, using an application registration published by EVOQS GmbH. On that page you grant mailypoppins permission to read, change and send your mail on your behalf (Microsoft Graph permissions Mail.Read, Mail.ReadWrite, Mail.Send, Calendars.ReadWrite, User.Read and offline_access). The access tokens Microsoft issues are delivered to and kept on your computer only.

Microsoft processes your sign-in under your own agreement with Microsoft or your organisation's. Its privacy statement is at privacy.microsoft.com. You can withdraw the permissions at any time at myapps.microsoft.com or, for a personal account, at account.live.com/consent/Manage.

Update checks

The desktop app checks GitHub for a newer release at most once a day, and whenever you ask it to. That request reaches GitHub, Inc. with your IP address, as any download from GitHub does.

This website

This website is a static site hosted by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, on servers in the European Union. When you visit it, OVH processes your IP address and the request details to deliver the pages and to protect the service, and keeps them in server logs. The legal basis is our legitimate interest in presenting the software (Art. 6(1)(f) GDPR). OVH processes this data on our behalf under a data processing agreement (Art. 28 GDPR). OVH's privacy policy is at ovhcloud.com.

The website sets no cookies, runs no analytics or tracking, and loads its fonts from its own domain.

Contacting us

If you email us, we use your address and message only to answer you, and delete them when the matter is settled unless commercial or tax law requires us to keep them (Art. 6(1)(b) and (f) GDPR).

Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability (Art. 15 to 21 GDPR). To exercise them, write to the address above. You may also complain to a supervisory authority; ours is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.