mirror of
https://github.com/ArcaneChat/server.git
synced 2026-07-03 14:05:37 +02:00
861 lines
39 KiB
HTML
861 lines
39 KiB
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
%VITE_HEAD%
|
|
</head>
|
|
|
|
<body data-bs-spy="scroll" data-bs-target=".navbar" data-bs-offset="51">
|
|
<div class="container-xxl bg-white p-0">
|
|
<!-- Navbar & Hero Start -->
|
|
<div class="container-xxl position-relative p-0" id="home">
|
|
%VITE_NAVBAR%
|
|
<div
|
|
class="container-xxl bg-primary hero-header"
|
|
style="margin-bottom: 0 !important"
|
|
>
|
|
<div class="container px-lg-5">
|
|
<div class="row gy-5">
|
|
<div class="col-lg-8 text-center text-lg-start">
|
|
<p class="pb-3"></p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<!-- Navbar & Hero End -->
|
|
|
|
<!-- Privacy Start -->
|
|
<div class="container-xxl" id="privacy">
|
|
<div class="container px-lg-5">
|
|
<div class="text-center">
|
|
<h5 class="text-primary-gradient fw-medium">Privacy</h5>
|
|
<h1 class="mb-5">ArcaneChat Terms & Privacy Policy</h1>
|
|
</div>
|
|
<div class="row justify-content-center">
|
|
<div class="col-lg-9">
|
|
<p>
|
|
ArcaneChat server is designed to never collect or store any
|
|
sensitive information. ArcaneChat messages cannot be accessed by
|
|
us or other third parties because they are always end-to-end
|
|
encrypted, private, and secure. Our Terms of Service and Privacy
|
|
Policy are available below.
|
|
</p>
|
|
<ul>
|
|
<li><a href="#terms">Terms of Service</a></li>
|
|
<li>
|
|
<a href="#privacy-policy-app"
|
|
>Privacy Policy of ArcaneChat App</a
|
|
>
|
|
</li>
|
|
<li>
|
|
<a href="#privacy-policy-server"
|
|
>Privacy Policy of arcanechat.me server</a
|
|
>
|
|
</li>
|
|
</ul>
|
|
<br />
|
|
<hr />
|
|
<br />
|
|
<h3 id="terms">Terms of Service</h3>
|
|
<p>
|
|
ArcaneChat Messenger (“ArcaneChat”) utilizes security and
|
|
end-to-end encryption to provide private messaging, and other
|
|
services to users. You agree to our Terms of Service (“Terms”)
|
|
by installing or using our apps, services, or website (together,
|
|
“Services”).
|
|
</p>
|
|
<h4>About our services</h4>
|
|
<p>
|
|
<strong>Minimum Age.</strong> You must be at least 13 years old
|
|
to use our Services. The minimum age to use our Services without
|
|
parental approval may be higher in your home country.
|
|
</p>
|
|
<p>
|
|
<strong>Account Registration.</strong> To create an account you
|
|
must register anonymously for our Services no private data is
|
|
required, a random username and password is generated for you
|
|
and kept in your ArcaneChat app.
|
|
</p>
|
|
<p>
|
|
<strong>Privacy of user data.</strong> ArcaneChat does not
|
|
collect your personal data or content in any way.
|
|
</p>
|
|
<p>
|
|
Please read our Privacy Policy to understand how we safeguard
|
|
the information you provide when using our Services. For the
|
|
purpose of operating our Services, you agree to our data
|
|
practices as described in our Privacy Policy.
|
|
</p>
|
|
<p>
|
|
<strong>Fees and Taxes.</strong> You are responsible for data
|
|
and mobile carrier fees and taxes associated with the devices on
|
|
which you use our Services.
|
|
</p>
|
|
<h4>Using ArcaneChat</h4>
|
|
<p>
|
|
<strong>Legal and Acceptable Use.</strong> You agree to use our
|
|
Services only for legal, authorized, and acceptable purposes.
|
|
You will not use (or assist others in using) our Services in
|
|
ways that: (a) violate or infringe the rights of ArcaneChat, our
|
|
users, or others, including privacy, publicity, intellectual
|
|
property, or other proprietary rights; (b) involve sending
|
|
illegal or impermissible communications such as bulk messaging.
|
|
</p>
|
|
<p>
|
|
<strong>Keeping Your Account Secure.</strong> ArcaneChat
|
|
embraces privacy by design and does not have the ability to
|
|
access your messages. You are responsible for keeping your
|
|
device and your ArcaneChat account safe and secure. If you lose
|
|
your phone and account backups, your data is lost forever.
|
|
</p>
|
|
|
|
<p>
|
|
<strong>Third-party services.</strong> Our Services may allow
|
|
you to access, use, or interact with third-party websites, apps,
|
|
content, and other products and services. When you use
|
|
third-party services, their terms and privacy policies govern
|
|
your use of those services.
|
|
</p>
|
|
|
|
<h4>Disclaimers and Limitations</h4>
|
|
<p>
|
|
<strong>Disclaimers.</strong> YOU USE OUR SERVICES AT YOUR OWN
|
|
RISK AND SUBJECT TO THE FOLLOWING DISCLAIMERS. WE PROVIDE OUR
|
|
SERVICES ON AN “AS IS” BASIS WITHOUT ANY EXPRESS OR IMPLIED
|
|
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF
|
|
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE,
|
|
NON-INFRINGEMENT, AND FREEDOM FROM COMPUTER VIRUS OR OTHER
|
|
HARMFUL CODE. ARCANECHAT DOES NOT WARRANT THAT ANY INFORMATION
|
|
PROVIDED BY US IS ACCURATE, COMPLETE, OR USEFUL, THAT OUR
|
|
SERVICES WILL BE OPERATIONAL, ERROR-FREE, SECURE, OR SAFE, OR
|
|
THAT OUR SERVICES WILL FUNCTION WITHOUT DISRUPTIONS, DELAYS, OR
|
|
IMPERFECTIONS. WE DO NOT CONTROL, AND ARE NOT RESPONSIBLE FOR,
|
|
CONTROLLING HOW OR WHEN OUR USERS USE OUR SERVICES. WE ARE NOT
|
|
RESPONSIBLE FOR THE ACTIONS OR INFORMATION (INCLUDING CONTENT)
|
|
OF OUR USERS OR OTHER THIRD PARTIES. YOU RELEASE US, AFFILIATES,
|
|
DIRECTORS, OFFICERS, EMPLOYEES, PARTNERS, AND AGENTS (TOGETHER,
|
|
“ARCANECHAT PARTIES”) FROM ANY CLAIM, COMPLAINT, CAUSE OF
|
|
ACTION, CONTROVERSY, OR DISPUTE (TOGETHER, “CLAIM”) AND DAMAGES,
|
|
KNOWN AND UNKNOWN, RELATING TO, ARISING OUT OF, OR IN ANY WAY
|
|
CONNECTED WITH ANY SUCH CLAIM YOU HAVE AGAINST ANY THIRD
|
|
PARTIES.
|
|
</p>
|
|
|
|
<p>
|
|
<strong>Limitation of liability.</strong> THE ARCANECHAT PARTIES
|
|
WILL NOT BE LIABLE TO YOU FOR ANY LOST PROFITS OR CONSEQUENTIAL,
|
|
SPECIAL, PUNITIVE, INDIRECT, OR INCIDENTAL DAMAGES RELATING TO,
|
|
ARISING OUT OF, OR IN ANY WAY IN CONNECTION WITH OUR TERMS, US,
|
|
OR OUR SERVICES, EVEN IF THE ARCANECHAT PARTIES HAVE BEEN
|
|
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR AGGREGATE
|
|
LIABILITY RELATING TO, ARISING OUT OF, OR IN ANY WAY IN
|
|
CONNECTION WITH OUR TERMS, US, OR OUR SERVICES WILL NOT EXCEED
|
|
ONE HUNDRED DOLLARS ($100). THE FOREGOING DISCLAIMER OF CERTAIN
|
|
DAMAGES AND LIMITATION OF LIABILITY WILL APPLY TO THE MAXIMUM
|
|
EXTENT PERMITTED BY APPLICABLE LAW. THE LAWS OF SOME STATES OR
|
|
JURISDICTIONS MAY NOT ALLOW THE EXCLUSION OR LIMITATION OF
|
|
CERTAIN DAMAGES, SO SOME OR ALL OF THE EXCLUSIONS AND
|
|
LIMITATIONS SET FORTH ABOVE MAY NOT APPLY TO YOU.
|
|
NOTWITHSTANDING ANYTHING TO THE CONTRARY IN OUR TERMS, IN SUCH
|
|
CASES, THE LIABILITY OF THE ARCANECHAT PARTIES WILL BE LIMITED
|
|
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW.
|
|
</p>
|
|
|
|
<p>
|
|
<strong>Availability of Our Services.</strong> Our Services may
|
|
be interrupted, including for maintenance, upgrades, or network
|
|
or equipment failures. We may discontinue some or all of our
|
|
Services, including certain features and the support for certain
|
|
devices and platforms, at any time.
|
|
</p>
|
|
|
|
<h4>Ending Terms</h4>
|
|
<p>
|
|
<strong>Ending these Terms.</strong> You may end these Terms
|
|
with ArcaneChat at any time by deleting ArcaneChat Messenger
|
|
from your device and discontinuing use of our Services. We may
|
|
modify, suspend, or terminate your access to or use of our
|
|
Services anytime for any reason, such as if you violate the
|
|
letter or spirit of our Terms or create harm, risk, or possible
|
|
legal exposure for ArcaneChat. The following provisions will
|
|
survive termination of your relationship with ArcaneChat:
|
|
“Disclaimers”, “Limitation of Liability”, “Availability” and
|
|
“Ending these Terms”.
|
|
</p>
|
|
|
|
<br />
|
|
<hr />
|
|
<br />
|
|
|
|
<h3 id="privacy-policy-app">Privacy Policy of ArcaneChat App</h3>
|
|
<p>
|
|
This is the privacy policy for the ArcaneChat app. You can find
|
|
the
|
|
<a href="#privacy-policy-server"
|
|
>privacy policy for arcanechat.me server here</a
|
|
>.
|
|
</p>
|
|
<h4>Summary</h4>
|
|
<p>
|
|
ArcaneChat is an e-mail app that follows a strict
|
|
privacy-by-design approach. All communication data remains on
|
|
the end devices or on the e-mail servers selected by the user.
|
|
</p>
|
|
<table class="table">
|
|
<thead>
|
|
<tr>
|
|
<th>Requirement</th>
|
|
<th>Implementation</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>Confidentiality</td>
|
|
<td>
|
|
<b>End-to-end encryption</b> by implementing
|
|
<a href="https://autocrypt.org">Autocrypt</a> and
|
|
<a href="https://securejoin.delta.chat/en/latest/new.html"
|
|
>Verified groups</a
|
|
>. User-friendly end-to-end encryption means that the
|
|
requirements of the GDPR are already implemented at the
|
|
technical level, <b>Privacy by Design</b>.
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Data minimization</td>
|
|
<td><b>No upload</b> of contact lists from your phone.</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Data avoidance</td>
|
|
<td>
|
|
<b>No processing of personal data</b>, no personal data is
|
|
ever sent to the ArcaneChat server.
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Legal basis</td>
|
|
<td>
|
|
There is no need to obtain consent for address book
|
|
matching,
|
|
<a href="https://gdpr-info.eu/art-7-gdpr/">Art.7 GDPR</a>,
|
|
as no address book data is transferred. Therefore,
|
|
<b>no additional legal basis</b> is required.
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Data to third parties</td>
|
|
<td>
|
|
We only receive the
|
|
<b>token for the push notification</b> and forward it to
|
|
the provider of your operating system.
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Data from third parties</td>
|
|
<td>
|
|
Easy implementation in companies: ArcaneChat does not
|
|
process personal data on behalf of the controller and
|
|
therefore
|
|
<b
|
|
>does not require any instruction or data processing
|
|
agreement</b
|
|
>. Easy connection with the own corporate e-mail server.
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>DPIA</td>
|
|
<td>
|
|
No <b>data protection impact assessment</b> needs to be
|
|
carried out for ArcaneChat
|
|
<a href="https://gdpr-info.eu/art-35-gdpr/">Art.35 GDPR</a
|
|
>, as no specific additional data is processed beyond the
|
|
e-mail messenger process. The risk to the rights and
|
|
freedoms of natural persons is limited to the internal
|
|
company data processing of the e-mail communication and
|
|
that of the e-mail providers.
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Documentation</td>
|
|
<td>
|
|
Inclusion of the measures implemented by ArcaneChat in the
|
|
<b>record of processing activities</b> may have a positive
|
|
impact on possible evidence,
|
|
<a href="https://gdpr-info.eu/art-30-gdpr/"
|
|
>Art.30 GDPR</a
|
|
>
|
|
as well as certification processes,
|
|
<a href="https://gdpr-info.eu/art-25-gdpr/"
|
|
>Art.25 (4) GDPR</a
|
|
>,<a href="https://gdpr-info.eu/art-42-gdpr/"
|
|
>Art.42 GDPR</a
|
|
>. The
|
|
<b>documentation of processing activities</b> related to
|
|
Messenger communication is omitted and shifts only to the
|
|
record of processing activities of your e-mail provider,
|
|
<a href="https://gdpr-info.eu/art-30-gdpr/"
|
|
>Art.30(2) GDPR</a
|
|
>.
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
|
|
<h3>Detailed data protection information</h3>
|
|
<h4>1. Name and contact information of the data controller</h4>
|
|
<p>Responsible for the processing of your personal data is</p>
|
|
<pre><code> Asiel Diaz Benitez
|
|
Reichsgrafen Str. 20
|
|
79102 Freiburg
|
|
Germany</code></pre>
|
|
<p>E-mail: %VITE_EMAIL_ADDR%</p>
|
|
<h4>2. Processing when using the ArcaneChat e-mail messenger</h4>
|
|
<p>
|
|
All data is stored locally on your device or with your e-mail
|
|
provider. Neither we nor ArcaneChat developers have any
|
|
possibility to access the end user's data, as all communication
|
|
is end-to-end encrypted. Only for the optional Push Notification
|
|
(see 2.2) the Push Notification Token is processed by the
|
|
ArcaneChat server.
|
|
</p>
|
|
<h5>2.1 Sign up with your e-mail provider</h5>
|
|
<p>
|
|
ArcaneChat communication works through your e-mail account. In
|
|
order to establish the connection, the app needs the access
|
|
data. These are only stored locally on your end device:
|
|
</p>
|
|
<ul>
|
|
<li>e-mail address</li>
|
|
<li>your password</li>
|
|
</ul>
|
|
<p>
|
|
The legal basis for the processing is
|
|
<a href="https://gdpr-info.eu/art-6-gdpr/"
|
|
>Art.6 (1) lit.b GDPR</a
|
|
>, as you have a usage contract with us by using our services.
|
|
</p>
|
|
<p>
|
|
Security procedures are in place to protect the confidentiality
|
|
of the data: Only the bare data needed to fulfil the user
|
|
request of login are stored, encryption takes place as well as
|
|
local sandboxing, see 2.3 for further details.
|
|
</p>
|
|
<h5>2.2 Heartbeat push notification</h5>
|
|
<p>
|
|
Push notifications can be sent to the user's phone at regular
|
|
intervals to enable receipt of messages while the ArcaneChat app
|
|
is not currently active. Current messages can then be retrieved
|
|
on the end device.
|
|
</p>
|
|
<p>
|
|
In order to use push notifications, a unique identifier or token
|
|
(Push Notification Token) is created after the app is downloaded
|
|
and installed. This token allows ArcaneChat server to send
|
|
notifications to the user's device. The token is then stored on
|
|
our systems and sent to the device at regular intervals to cause
|
|
the app to retrieve new messages.
|
|
</p>
|
|
<h5>2.3 Data in the app</h5>
|
|
<p>
|
|
The ArcaneChat app works in a data-saving way. All relevant data
|
|
is stored exclusively on the respective end devices:
|
|
</p>
|
|
<pre><code>- chat histories (text messages, voice messages, media, ...).
|
|
- contacts
|
|
- settings</code></pre>
|
|
<p>
|
|
ArcaneChat servers have no access to this data, as data
|
|
processing takes place only on the end devices.
|
|
</p>
|
|
<h5>2.4 App permissions</h5>
|
|
<p>
|
|
Within the app, you can enter, manage, and edit various
|
|
information, tasks, and activities. The app also requires the
|
|
following permissions:
|
|
</p>
|
|
<table class="table">
|
|
<thead>
|
|
<tr>
|
|
<th>Permission</th>
|
|
<th>Reason</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>Internet access</td>
|
|
<td>
|
|
This is needed to send the messages to the communication
|
|
partner.
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Camera access</td>
|
|
<td>
|
|
This is needed for you to take photos and send them via
|
|
the app. In addition, the camera access allows you to scan
|
|
QR codes.
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Microphone access (optional)</td>
|
|
<td>This permission allows you to send voice messages.</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Location access (optional)</td>
|
|
<td>
|
|
This is needed if you want to share your location with a
|
|
communication partner.
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Storage (optional)</td>
|
|
<td>
|
|
You can save images and files from the app to your device.
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
|
|
<p>
|
|
The processing and use of the above permissions are performed to
|
|
provide the service. The internet access is necessary for the
|
|
use, therefore the legal basis of the processing is
|
|
<a href="https://gdpr-info.eu/art-6-gdpr/"
|
|
>Art.6 (1) lit.a GDPR</a
|
|
>, as you have a usage contract with us by using our services.
|
|
</p>
|
|
<p>
|
|
The optional permissions only take place based on your consent
|
|
according to
|
|
<a href="https://gdpr-info.eu/art-6-gdpr/"
|
|
>Art.6 (1) lit.a GDPR</a
|
|
>
|
|
and can also be reduced to individual services, e.g. only
|
|
internet usage to send messages without pictures or location
|
|
data. ArcaneChat does not receive any access to this data.
|
|
</p>
|
|
<h4>3. Platform dependent processing</h4>
|
|
<p>
|
|
Certain information is already processed automatically as soon
|
|
as you use the app. We have listed below which personal data is
|
|
processed exactly:
|
|
</p>
|
|
<p>
|
|
When you download the app, certain required information is
|
|
transmitted to the app store you use ( e.g. Google Play or Apple
|
|
App Store), in particular the username, the email address, the
|
|
customer number of your account, the time of the download,
|
|
payment information as well as the individual device
|
|
identification number may be processed. The processing of this
|
|
data is carried out exclusively by the respective app store and
|
|
is beyond our control.
|
|
</p>
|
|
<p>
|
|
For the rest, we refer to the data protection policies of the
|
|
respective app store providers or responsible parties of the
|
|
operating systems. We do not collect and/or process any other
|
|
data.
|
|
</p>
|
|
<p>
|
|
Your personal data will not be transferred to third parties for
|
|
purposes other than those listed below.
|
|
</p>
|
|
<h4>4. Rights of the data subject</h4>
|
|
<p>
|
|
As a data subject of a processing of personal data, you have the
|
|
right to
|
|
</p>
|
|
<ol>
|
|
<li>
|
|
request information about your personal data processed by us
|
|
in accordance with
|
|
<a href="https://gdpr-info.eu/art-15-gdpr/">Art.15 GDPR</a>.
|
|
In particular, you can request information about the
|
|
processing purposes, the category of personal data, the
|
|
categories of recipients to whom your data have been or will
|
|
be disclosed, the planned storage period, the existence of a
|
|
right to rectification, erasure, restriction of processing or
|
|
objection, the existence of a right of complaint, the origin
|
|
of your data if it has not been collected by us, as well as
|
|
the existence of automated decision-making including profiling
|
|
and, if applicable, meaningful information about its details;
|
|
</li>
|
|
<li>
|
|
in accordance with
|
|
<a href="https://gdpr-info.eu/art-16-gdpr/">Art.16 GDPR</a> of
|
|
the GDPR, immediately request the correction of inaccurate or
|
|
incomplete personal data stored by us;
|
|
</li>
|
|
<li>
|
|
pursuant to
|
|
<a href="https://gdpr-info.eu/art-17-gdpr/">Art.17 GDPR</a> of
|
|
the GDPR, to request the erasure of your personal data stored
|
|
by us, unless the processing is necessary for the exercise of
|
|
the right to freedom of expression and information, for
|
|
compliance with a legal obligation, for reasons of public
|
|
interest, or for the establishment, exercise or defence of
|
|
legal claims;
|
|
</li>
|
|
<li>
|
|
pursuant to
|
|
<a href="https://gdpr-info.eu/art-18-gdpr/">Art.18 GDPR</a>,
|
|
to request the restriction of the processing of your personal
|
|
data, insofar as the accuracy of the data is disputed by you,
|
|
the processing is unlawful, but you object to its erasure and
|
|
we no longer require the data, but you need it for the
|
|
assertion, exercise or defence of legal claims or you have
|
|
objected to the processing pursuant to
|
|
<a href="https://gdpr-info.eu/art-21-gdpr/">Art.21 GDPR</a>;
|
|
</li>
|
|
<li>
|
|
pursuant to
|
|
<a href="https://gdpr-info.eu/art-20-gdpr/">Art.20 GDPR</a>,
|
|
to receive your personal data that you have provided to us in
|
|
a structured, common and machine-readable format or to request
|
|
that it be transferred to another controller;
|
|
</li>
|
|
<li>
|
|
in accordance with
|
|
<a href="https://gdpr-info.eu/art-7-gdpr/">Art.7 (3) GDPR</a>,
|
|
to revoke your consent given to us at any time. This has the
|
|
consequence that we may no longer continue the data processing
|
|
based on this consent in the future; and
|
|
</li>
|
|
<li>
|
|
complain to a supervisory authority in accordance with
|
|
<a href="https://gdpr-info.eu/art-77-gdpr/">Art.77 GDPR</a> of
|
|
the GDPR. As a rule, you can contact the supervisory authority
|
|
of your usual place of residence or workplace.
|
|
</li>
|
|
</ol>
|
|
<h4>
|
|
5. Up-to-dateness and modification of this data protection
|
|
declaration
|
|
</h4>
|
|
<p>
|
|
This data protection declaration is valid as of January 2025.
|
|
Due to the further development of our website and offers or due
|
|
to changed legal or official requirements, it may become
|
|
necessary to revise this data protection declaration from time
|
|
to time.
|
|
</p>
|
|
|
|
<br />
|
|
<hr />
|
|
<br />
|
|
<h3 id="privacy-policy-server">
|
|
Privacy Policy of arcanechat.me server
|
|
</h3>
|
|
<strong>Summary: No personal data asked or collected</strong>
|
|
<p>
|
|
ArcaneChat server neither asks for nor retains personal
|
|
information. ArcaneChat server exist to reliably transmit (store
|
|
and deliver) end-to-end encrypted messages between user's
|
|
devices running the ArcaneChat messenger app.
|
|
</p>
|
|
<p>ArcaneChat server:</p>
|
|
<ul>
|
|
<li>
|
|
<p>unconditionally removes messages after 20 days,</p>
|
|
</li>
|
|
<li>
|
|
<p>prohibits sending out un-encrypted messages,</p>
|
|
</li>
|
|
<li>
|
|
<p>does not store Internet addresses ("IP addresses"),</p>
|
|
</li>
|
|
<li>
|
|
<p>
|
|
does not process IP addresses in relation to email
|
|
addresses.
|
|
</p>
|
|
</li>
|
|
</ul>
|
|
<p>
|
|
Due to the resulting lack of personal data processing this
|
|
server may not require a privacy policy.
|
|
</p>
|
|
<p>
|
|
Nevertheless, we provide legal details below to make life easier
|
|
for data protection specialists and lawyers scrutinizing the
|
|
server's operations.
|
|
</p>
|
|
<h4>1. Name and contact information</h4>
|
|
<p>
|
|
Responsible for the processing of your personal data is:
|
|
<code>Asiel Diaz Benitez</code>
|
|
</p>
|
|
<p>E-mail: %VITE_EMAIL_ADDR%</p>
|
|
<h4>2. Processing when using ArcaneChat services</h4>
|
|
<p>
|
|
We provide services optimized for the use from
|
|
<a href="https://arcanechat.me">ArcaneChat</a> apps and process
|
|
only the data necessary for the setup and technical execution of
|
|
message delivery. The purpose of the processing is that users
|
|
can read, write, manage, delete, send, and receive chat
|
|
messages. For this purpose, we operate server-side software that
|
|
enables us to send and receive messages.
|
|
</p>
|
|
<p>We process the following data and details:</p>
|
|
<ul>
|
|
<li>
|
|
<p>
|
|
Outgoing and incoming messages (SMTP) are stored for transit
|
|
on behalf of their users until the message can be delivered.
|
|
</p>
|
|
</li>
|
|
<li>
|
|
<p>
|
|
E-Mail-Messages are stored for the recipient and made
|
|
accessible via IMAP protocols, until explicitly deleted by
|
|
the user or until a fixed time period is exceeded, (<em
|
|
>usually 4-8 weeks</em
|
|
>).
|
|
</p>
|
|
</li>
|
|
<li>
|
|
<p>
|
|
IMAP and SMTP protocols are password protected with unique
|
|
credentials for each account.
|
|
</p>
|
|
</li>
|
|
<li>
|
|
<p>
|
|
Users can retrieve or delete all stored messages without
|
|
intervention from the operators using standard IMAP client
|
|
tools.
|
|
</p>
|
|
</li>
|
|
<li>
|
|
<p>
|
|
Users can connect to a "realtime relay service" to establish
|
|
Peer-to-Peer connection between user devices, allowing them
|
|
to send and retrieve ephemeral messages which are never
|
|
stored on the ArcaneChat server, also not in encrypted form.
|
|
</p>
|
|
</li>
|
|
</ul>
|
|
<h5>2.1 Account setup</h5>
|
|
<p>
|
|
Creating an account happens in one of two ways on our mail
|
|
servers:
|
|
</p>
|
|
<ul>
|
|
<li>
|
|
<p>
|
|
with a QR invitation token which is scanned using the
|
|
ArcaneChat app and then the account is created.
|
|
</p>
|
|
</li>
|
|
<li>
|
|
<p>
|
|
by letting ArcaneChat otherwise create an account and
|
|
register it with a arcanechat.me mail server.
|
|
</p>
|
|
</li>
|
|
</ul>
|
|
<p>
|
|
In either case, we process the newly created email address. No
|
|
phone numbers, other email addresses, or other identifiable data
|
|
is currently required. The legal basis for the processing is
|
|
Art. 6 (1) lit. b GDPR, as you have a usage contract with us by
|
|
using our services.
|
|
</p>
|
|
<h5>2.2 Processing of E-Mail-Messages</h5>
|
|
<p>
|
|
In addition, we will process data to keep the server
|
|
infrastructure operational for purposes of e-mail dispatch and
|
|
abuse prevention.
|
|
</p>
|
|
<ul>
|
|
<li>
|
|
<p>
|
|
Therefore, it is necessary to process the content and/or
|
|
metadata (e.g., headers of the email as well as smtp
|
|
chatter) of E-Mail-Messages in transit.
|
|
</p>
|
|
</li>
|
|
<li>
|
|
<p>
|
|
We will keep logs of messages in transit for a limited time.
|
|
These logs are used to debug delivery problems and software
|
|
bugs.
|
|
</p>
|
|
</li>
|
|
</ul>
|
|
<p>
|
|
In addition, we process data to protect the systems from
|
|
excessive use. Therefore, limits are enforced:
|
|
</p>
|
|
<ul>
|
|
<li>
|
|
<p>rate limits</p>
|
|
</li>
|
|
<li>
|
|
<p>storage limits</p>
|
|
</li>
|
|
<li>
|
|
<p>message size limits</p>
|
|
</li>
|
|
<li>
|
|
<p>
|
|
any other limit necessary for the whole server to function
|
|
in a healthy way and to prevent abuse.
|
|
</p>
|
|
</li>
|
|
</ul>
|
|
<p>
|
|
The processing and use of the above permissions are performed to
|
|
provide the service. The data processing is necessary for the
|
|
use of our services, therefore the legal basis of the processing
|
|
is Art. 6 (1) lit. b GDPR, as you have a usage contract with us
|
|
by using our services. The legal basis for the data processing
|
|
for the purposes of security and abuse prevention is Art. 6 (1)
|
|
lit. f GDPR. Our legitimate interest results from the
|
|
aforementioned purposes. We will not use the collected data for
|
|
the purpose of drawing conclusions about your person.
|
|
</p>
|
|
<h4>3. Processing when using our Website</h4>
|
|
<p>
|
|
When you visit our website, the browser used on your end device
|
|
automatically sends information to the server of our website.
|
|
This information is temporarily stored in a so-called log file.
|
|
The following information is collected and stored until it is
|
|
automatically deleted (<em>usually 7 days</em>):
|
|
</p>
|
|
<ul>
|
|
<li>
|
|
<p>used type of browser,</p>
|
|
</li>
|
|
<li>
|
|
<p>used operating system,</p>
|
|
</li>
|
|
<li>
|
|
<p>access date and time as well as</p>
|
|
</li>
|
|
<li>
|
|
<p>country of origin and IP address,</p>
|
|
</li>
|
|
<li>
|
|
<p>the requested file name or HTTP resource,</p>
|
|
</li>
|
|
<li>
|
|
<p>the amount of data transferred,</p>
|
|
</li>
|
|
<li>
|
|
<p>
|
|
the access status (file transferred, file not found, etc.)
|
|
and
|
|
</p>
|
|
</li>
|
|
<li>
|
|
<p>the page from which the file was requested.</p>
|
|
</li>
|
|
</ul>
|
|
<p>
|
|
This website is hosted by an external service provider (hoster).
|
|
The personal data collected on this website is stored on the
|
|
hoster's servers. Our hoster will process your data only to the
|
|
extent necessary to fulfill its obligations to perform under our
|
|
instructions. In order to ensure data protection-compliant
|
|
processing, we have concluded a data processing agreement with
|
|
our hoster.
|
|
</p>
|
|
<p>
|
|
The aforementioned data is processed by us for the following
|
|
purposes:
|
|
</p>
|
|
<ul>
|
|
<li>
|
|
<p>Ensuring a reliable connection setup of the website,</p>
|
|
</li>
|
|
<li>
|
|
<p>ensuring a convenient use of our website,</p>
|
|
</li>
|
|
<li>
|
|
<p>
|
|
checking and ensuring system security and stability, and
|
|
</p>
|
|
</li>
|
|
<li>
|
|
<p>for other administrative purposes.</p>
|
|
</li>
|
|
</ul>
|
|
<p>
|
|
The legal basis for the data processing is Art. 6 (1) lit. f
|
|
GDPR. Our legitimate interest results from the aforementioned
|
|
purposes of data collection. We will not use the collected data
|
|
for the purpose of drawing conclusions about your person.
|
|
</p>
|
|
<h4>4. Transfer of Data</h4>
|
|
<p>
|
|
We do not retain any personal data but e-mail messages waiting
|
|
to be delivered may contain personal data. Any such residual
|
|
personal data will not be transferred to third parties for
|
|
purposes other than those listed below:
|
|
</p>
|
|
<p>
|
|
a) you have given your express consent in accordance with Art. 6
|
|
para. 1 sentence 1 lit. a GDPR,
|
|
</p>
|
|
<p>
|
|
b) the disclosure is necessary for the assertion, exercise or
|
|
defence of legal claims pursuant to Art. 6 (1) sentence 1 lit. f
|
|
GDPR and there is no reason to assume that you have an
|
|
overriding interest worthy of protection in the non-disclosure
|
|
of your data,
|
|
</p>
|
|
<p>
|
|
c) in the event that there is a legal obligation to disclose
|
|
your data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, as
|
|
well as
|
|
</p>
|
|
<p>
|
|
d) this is legally permissible and necessary in accordance with
|
|
Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of
|
|
contractual relationships with you,
|
|
</p>
|
|
<p>
|
|
e) this is carried out by a service provider acting on our
|
|
behalf and on our exclusive instructions, whom we have carefully
|
|
selected (Art. 28 (1) GDPR) and with whom we have concluded a
|
|
corresponding contract on commissioned processing (Art. 28 (3)
|
|
GDPR), which obliges our contractor, among other things, to
|
|
implement appropriate security measures and grants us
|
|
comprehensive control powers.
|
|
</p>
|
|
<h4>5. Rights of the data subject</h4>
|
|
<p>
|
|
The rights arise from Articles 12 to 23 GDPR. Since no personal
|
|
data is stored on our servers, even in encrypted form, there is
|
|
no need to provide information on these or possible objections.
|
|
A deletion can be made directly in the ArcaneChat email
|
|
messenger.
|
|
</p>
|
|
<p>
|
|
If you have any questions or complaints, please feel free to
|
|
contact us by email: %VITE_EMAIL_ADDR%<br />
|
|
</p>
|
|
<p>
|
|
As a rule, you can contact the supervisory authority of your
|
|
usual place of residence or workplace.
|
|
</p>
|
|
<h4>6. Validity of this privacy policy</h4>
|
|
<p>
|
|
This data protection declaration is valid as of
|
|
<em>January 2025</em>. Due to the further development of our
|
|
service and offers or due to changed legal or official
|
|
requirements, it may become necessary to revise this data
|
|
protection declaration from time to time.
|
|
</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<!-- Privacy End -->
|
|
|
|
%VITE_FOOTER%
|
|
</div>
|
|
</body>
|
|
</html>
|