uucpmail.de
Privacy policy
Courtesy translation. The German version is the legally binding one; in case of discrepancies the German text prevails.
1. Controller
uucpmail.de is a non-commercial private project run by an individual. The controller within the meaning of the GDPR is the operator named in the imprint (German), e-mail: beta (at) uucpmail.de.
2. Hosting
The service runs on a server operated by manitu GmbH (St. Wendel, Germany). Encrypted backups are stored with Hetzner Online GmbH (Storage Box, Germany). Data-processing agreements pursuant to Art. 28 GDPR are in place with these providers.
3. Visiting this website
This website keeps no access logs. Technically necessary web-server error logs may contain IP addresses in individual cases (Art. 6 (1) (f) GDPR – operation and security) and are rotated away automatically after a short time. This site uses no cookies, no tracking and loads nothing from third-party servers.
4. Beta sign-up
When you sign up we process your name/pseudonym, e-mail address, SSH public key and information about your setup (Art. 6 (1) (b) GDPR – establishing and operating the usage relationship). Deletion: after participation ends, at the latest 3 months after the service is discontinued.
5. E-mail transport (the core of the service)
The purpose of the service is transferring e-mail between the internet and your UUCP system. In doing so we process message contents and metadata (sender, recipients, size, timestamps). German telecommunications secrecy (§ 3 TDDDG) applies. Legal basis: Art. 6 (1) (b) GDPR.
| Data | Retention |
|---|---|
| Incoming messages (until fetched by your system) | max. 30 days; afterwards deletion and a non-delivery notification to the sender |
| Delivered messages | 48 hours after fetching (redelivery reserve), then content deletion |
| Outgoing messages | 48 hours after sending, then content deletion |
| Transport metadata (no contents) | 3 months (fault/abuse analysis; monthly billing planned) |
Incoming and outgoing messages are automatically checked for spam and abuse (Rspamd, locally on our servers – no transfer to third parties). Outgoing messages receive a DKIM signature. When delivering to external recipients, messages are naturally transferred to their mail servers, which may be located outside the EU; we have no influence over this.
6. Connection and audit data
For operation, security and abuse prevention we log UUCP sessions: time, node identifier, SSH key fingerprint, IP address and volume transferred (Art. 6 (1) (f) GDPR, § 12 TDDDG). Message contents are never logged. Deletion after 60 days.
7. Backups
Database and message store are backed up in encrypted form (restic, AES-256). Backups serve the same purposes and are deleted on a rolling basis (14 daily, 8 weekly snapshots). Content subject to regular deletion therefore disappears from backups after roughly 8 weeks at the latest.
8. Your rights
You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and the right to lodge a complaint with a supervisory authority. The competent authority is the Independent Centre for Data Protection Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany, www.datenschutzzentrum.de.
Version: 14 October 2026