Privacy notice
1. Controller
Jan-Hendrik Beuth
Harmsstraße 54
24114 Kiel
Germany
Email: jb@anymail.ws
2. What is processed when you request an address
The service sets up a time-limited mail forwarding on request. The following data is processed for that purpose:
| Data | Form | Purpose | Retention |
|---|---|---|---|
| Requested address name (local part) | plain text | The address has to be creatable. | up to 30 days after the request is closed |
| Your target address | plain text | Sending the confirmation mail and setting up the forwarding. | only until activation, deleted immediately afterwards |
| Your target address | HMAC-SHA256 with a secret key | Enforcing the rule "at most one forwarding per target address" and preventing abuse. | up to 30 days after the request is closed |
| Your IP address | HMAC-SHA256 with a secret key | Limiting requests per connection (protection against automated bulk abuse). | 48 hours in the request log |
| Timestamps and status of the request | plain text | Expiry of deadlines, troubleshooting during operation. | up to 30 days after the request is closed |
| Chosen language | plain text | Language of the confirmation mail. | same as the request |
3. Why your address is hashed
The service needs to recognise whether a forwarding already exists for a target address – without storing that address permanently. To do so it derives a check value from the address using a secret, application-wide key (HMAC-SHA256). The same input always produces the same check value, but the address cannot be computed back from it. Without the secret key, trying out addresses is not practical either.
The target address exists in plain text only between the request and the moment the forwarding is demonstrably live. It is then deleted in the very same database statement that activates the request. From that point on the application knows your address only as a check value. The forwarding itself is then handled by the hosting provider (section 7).
While the forwarding exists, the mapping from the temporary address to your target address is visible in the hosting provider's admin interface and can therefore be seen by the controller. It ceases when the forwarding is deleted.
4. Legal bases
- Art. 6(1)(b) GDPR – providing the service you requested (creating, operating and deleting the forwarding, including the confirmation mail).
- Art. 6(1)(f) GDPR – legitimate interest in preventing automated abuse, spam and impersonation (hashed IP address, request limits, blocklist, in-browser proof of work).
5. Cookies and browser storage
Only strictly necessary cookies are set:
-
anymail_sess– session identifier. Protects the form against cross-site submission (CSRF) and holds the bot check's puzzle. Deleted when you close your browser. -
anymail_lang– remembers the chosen language. Contains onlydeoren, valid for one year.
Both cookies are set with Secure, HttpOnly and
SameSite=Strict. There is no analytics, no tracking and no
profiling. Nothing is loaded from third-party servers – no fonts, no
scripts, no content delivery network. The bot check (Altcha) also runs entirely
on this server; no data is transmitted to third parties.
6. Contents of forwarded messages
Messages sent to a temporary address are delivered straight to your confirmed address by the hosting provider's mail system. This application does not read, store or process message content.
7. Processing on our behalf and hosting
The web server, database and mail system are operated by:
ALL-INKL.COM – Neue Medien Münnich
Inh. René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. Server location and processing take place within the European Union.
8. Server logs
The hosting provider's web server keeps its own access logs, over which this application has no control. The access log is stored in anonymised form and deleted after 7 days.
9. Retention periods at a glance
- Target address in plain text: immediately upon activation of the forwarding.
- Unconfirmed requests: lapse after 2 hours and are closed.
- Forwarding: deleted automatically 24 hours after confirmed activation.
- Request log (IP check value): 48 hours.
- Closed requests overall: 30 days.
Deletion is carried out by an automated process that runs regularly. No manual intervention is required.
10. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
A practical note on access requests: the service keeps no user accounts. After activation your address is stored only as a check value. Attribution is therefore possible only while a request is running, and only via the status page sent to you. Please state the temporary address concerned when making a request.
Competent supervisory authority:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Holstenstraße 98
24103 Kiel
Germany
11. Reporting abuse
If an address created through this service is being misused, please contact abuse@anymail.ws.
12. Last updated
27 August 2026