Privacy policy
How ReptiMail processes personal data, mail credentials and message content required to operate the service.
Data controller
The data controller for ReptiMail is PIERA KEVIN / REPTILEBLADE. Contact: contact@reptileblade.tech.
Data processed
Depending on the features used: email address, display name, IMAP/SMTP settings, login credentials, generated ReptiMail addresses, message headers and content viewed, drafts, interface preferences, session technical data and security information.
Purposes and legal bases
Data is processed to provide requested messaging and external account connection features, to secure the service and prevent abuse, to meet applicable legal obligations and, if optional trackers are introduced later, on the basis of consent where required.
External accounts and passwords
External account passwords are encrypted in private server storage for reconnection and recovery. They are never stored as plaintext in browser storage. The PHP session controls access; its expiry does not delete saved connections.
Browser storage
Addresses, loaded messages, drafts and preferences may be saved in browser local storage to provide the requested functionality. Users can delete this data through ReptiMail or their browser settings.
Recipients and processors
Data is accessed only as needed for the service. OVHcloud acts as hosting provider. When Gmail, Outlook, OVH, Yahoo, iCloud or another provider is connected, that provider also processes data under its own terms.
Retention
External connections are retained until you remove them in ReptiMail. Removal also deletes their credentials from the service’s fallback copy. The recovery backup remains until disabled and is updated when your workspace changes. Browser data remains until removed. Historical hosting backups follow the host’s retention policy.
Your rights
You may request access, correction, erasure, restriction, objection where applicable and portability where the conditions are met. Consent can be withdrawn at any time. Contact: contact@reptileblade.tech. You may also lodge a complaint with the French CNIL or your competent supervisory authority.
International transfers
ReptiMail is hosted in France by OVHcloud. A third-party mail provider you deliberately connect may carry out international processing according to its own privacy policy and safeguards.
Security
ReptiMail uses HTTPS/TLS, session limits, server-side secret encryption, no external passwords in localStorage, security HTTP headers and restricted backend data access.
Recovery and encrypted backup
When you enable recovery, ReptiMail stores an encrypted server-side copy of your addresses, external account metadata, loaded message text and drafts. Only a hash of your recovery code is stored. This feature uses the private server key and is not end-to-end encryption. Draft files are excluded.
If a translation differs from the French legal documents, the French version is the reference version.