Privacy notice for user accounts

This page supplements the general privacy policy of frankysweb.de with the additional points that apply specifically to registering/signing in with mailtools. For everything else (cookies, analytics, advertising) the general policy still applies.

What data is stored

• Email address: serves as the username, used for signing in and for confirmation/reset links.
• Password: NEVER stored in plain text, only as an Argon2id hash (a one-way scheme the original password cannot be recovered from).
• Session cookie: a random, non-meaningful value that references a signed-in session server-side. Becomes invalid on logout or after 30 days.
• Timestamp of registration and of accepting these terms.

Purpose and retention

The data serves exclusively to operate the user account feature itself (login, password reset, and in the future optional tools reserved for signed-in users). There is no sharing with third parties. The data is kept until the account is deleted.

Saved DNS entries

Signed-in users can store a DNS entry created in the generator, again only on an explicit click. The generator itself works fully without an account, just without storage.

• What is stored: the generated entry, the domain it is for, your form input and a name you choose. All of it you entered yourself; mailtools queries nothing for it.
• Who it belongs to: the account alone. No public access path, no sharing, no disclosure.
• For how long: indefinitely. Unlike a check result a draft does not go stale; it stays until you delete it, and it goes with the account.
• How many: at most 50 per account.

Saved check results

Signed-in users can store the result of a check. This only ever happens on an explicit click on “Save result“. Nothing is recorded in the background, and the feature does not exist without an account.

• What is stored: the checked target (a domain, for example), the form input, the result of the check and the time. All of it comes from public sources (DNS, publicly reachable servers) and was gathered by mailtools itself.
• Who it belongs to: the account alone. There is no public access path, no sharing with other users and no disclosure to third parties.
• For how long: saved results are deleted automatically after 180 days. The date can be extended at any time from the list, and every result can be deleted by hand whenever you like.
• How many: at most 100 per account.

Your rights

The account and all associated data can be permanently deleted at any time via the account page. For access requests, corrections, or other concerns, see the contact details in the general privacy policy.