Privacy policy (summary)

JMapper Mail connects directly to your mail server and your sign-in service. We run no servers your messages pass through and collect no usage, analytics or advertising data. Neither the website nor the app contains trackers or ads.

Controller

Website

• Server logs: our web server processes the data needed to deliver pages (IP address, time, requested URL, user agent, status) for operation and security, and deletes or anonymises them when no longer needed (Art. 6(1)(f) GDPR).
• No cookies, no analytics: all fonts, images and scripts come from jmapper.de. If you explicitly pick light or dark mode, your browser stores that choice under jmapper-theme in local storage; choosing “system” removes it.
• Contact: when you write to us, we use your message (and any diagnostic log you attach) to answer it.

App

• Your mail travels TLS-encrypted between your device and the mail server you entered. You sign in at your provider's identity service in the browser; JMapper stores no password, only the tokens it issues, in the device keychain. Your provider is responsible for the data it holds.
• On the device, JMapper keeps a cache of messages, drafts, settings, collected recipients and your OpenPGP/S/MIME keys in the app's private storage. Contacts are read only with your permission and never leave the device.
• Organizer data (tags, notes, follow-ups, projects, snippets, rules) stays on the device and, with “Sync with iCloud” on (default), in your private iCloud, end-to-end encrypted. Neither Apple nor we can read it.
• Push notifications (optional, iPhone/iPad): your mail server sends encrypted hints (RFC 8291) to our gateway push.roessner-net.de, which forwards them to Apple Push Notification service. The gateway stores the device token and subscription address and keeps short-lived connection logs; it cannot read the hints. Turning push off removes the registration.
• Automatic setup queries DNS and the web server of your mail domain; with WebFinger your full address is sent to the domain's provider.
• Key lookup (optional) asks the recipient domain's Web Key Directory and keys.openpgp.org for an address.
• Remote images load only after you allow them; the image server then learns your IP address.
• Diagnostic log stays on the device unless you share it, and contains no message content, subjects or credentials.
• Crash reports reach us only if you agreed in system settings, through Apple's App Store Connect or TestFlight.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and you may withdraw consent at any time. You can lodge a complaint with a supervisory authority, in particular the Hessian Commissioner for Data Protection and Freedom of Information.

Last updated: October 2026