Privacy Policy

Pursuant to Art. 13 GDPR (DSGVO).

1. Controller

Lennart Hostettler
c/o Adressschutz
Reichenhainer Str. 20
09126 Chemnitz, Germany
Email: lennart.hostettler@proton.me

Full details in the Legal Notice (Impressum).

2. What we process

• Mail content. Any message sent to an address at spam.is (subject, sender, body) is stored so it can be shown to whoever holds that address.
• Connection logs. IP address and timestamp of incoming SMTP connections and API requests, kept only as long as needed to prevent abuse.

There is no account system and nothing links an address to a real identity on our end, we only know what's inside the mail itself.

3. Why we process it

Storing mail content is necessary to provide the service you asked for (Art. 6(1)(b) GDPR). Connection logs are kept on the basis of a legitimate interest in running a stable, abuse-resistant service (Art. 6(1)(f) GDPR).

4. Retention

Mail is deleted automatically a fixed time after arrival (default: 24 hours), and older messages are dropped once an address holds more than a fixed number of them. Connection logs are rotated on a short cycle. Deleting the address deletes its contents immediately.

5. Recipients & transfers

Data is not sold, shared with advertisers, or passed to third parties beyond what's needed to run the mail server and API infrastructure itself. No international transfer outside the hosting location is intended.

6. Cookies & tracking

None. No analytics, no third-party scripts, no tracking cookies.

7. Your rights

Under the GDPR you have the right to access, correct, delete, or restrict processing of your data, to data portability, and to object to processing based on legitimate interest. Since there's no account system, most of this is moot for mail content, anyone can already read or delete an address by knowing its name. For connection-log requests, contact us via the details in the Impressum. You also have the right to lodge a complaint with a data protection supervisory authority.