Privacy Policy
Last updated: 1 November 2026 (Google Analytics with consent)
Controller
Michael Papst, Viktor-Franz-Straße 24, 8051 Graz, Austria, sales@imapsync.cc.
Mailbox credentials and content
To run a job we need the login, password and server of both mailboxes. Passwords are transmitted encrypted (HTTPS), kept only in memory and in a temporary file readable by the sync process, and deleted as soon as the job ends. They are never written to a database and are masked in logs. Messages are streamed from the source to the destination server and are not stored by us. Legal basis: performance of the contract (Art. 6 (1) (b) GDPR).
Job logs
The imapsync log of each job (server names, logins, folder names, message counts and sizes, errors — no message content and no subjects) is kept so that you can follow and download it, and deleted when your 24-hour pass ends; logs of free checks are deleted after 48 hours.
Payments
Payments are processed by Stripe (Stripe Payments Europe Ltd., Dublin, Ireland, and for Managed Payments its affiliates acting as merchant of record). Stripe receives your payment details and e-mail address directly; we only store the payment reference, amount and the e-mail address Stripe returns, to provide the pass and for accounting (Art. 6 (1) (b) and (c) GDPR). Stripe's privacy policy: stripe.com/privacy.
Cookies and local storage
imapsync.cc uses no advertising cookies. Technically necessary storage, which does not require consent (§ 165 (3) TKG 2021, Art. 5 (3) ePrivacy Directive), is always used. Google Analytics is used only if you click “Accept” in the cookie banner; you can change your choice at any time via “Cookie settings” at the bottom of every page.
isc (cookie, HttpOnly) | Links your browser to your pass and your jobs. Set when you start a check, job or payment. Expires after 30 days. |
isc-form-v1 (session storage) | Remembers the server names and logins you typed (never passwords) while the tab is open, for example while the payment window is open. Deleted when you close the tab. |
isc-consent (local storage) | Remembers your cookie choice (accepted or declined analytics). |
_ga, _ga_LJCM9BKX9Z (cookies, only with consent) | Google Analytics: distinguish visitors and sessions. Expire after 2 years. Deleted when you withdraw consent. |
Google Analytics (only with your consent)
With your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It tells us how visitors use the site (pages viewed, approximate location by country/city, device and browser type, referring website, and whether a pass was purchased — pass type and amount, never mailbox addresses, passwords or payment details). IP addresses are not stored by Google Analytics 4; Google signals and ad personalisation are switched off. Data may be processed by Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). Legal basis: your consent (Art. 6 (1) (a) GDPR, § 165 (3) TKG 2021), which you can withdraw at any time with effect for the future via “Cookie settings”. Data is retained for at most 14 months. More information: policies.google.com/privacy.
The payment page is operated by Stripe on its own domain (checkout.stripe.com). Stripe sets cookies there for fraud prevention and payment processing under its own cookie policy.
Server logs
The web server keeps standard access logs (IP address, time, requested page) for up to 14 days for security purposes (Art. 6 (1) (f) GDPR).
Hosting
The service runs on our own server in a data centre of Hetzner Online GmbH in the European Union.
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority (in Austria: Datenschutzbehörde, dsb.gv.at). Write to sales@imapsync.cc.