Privacy policy

Your files stay on your device

When you open a file, it is read and checked by code running in your browser. The file and its contents are not uploaded to our servers or sent to anyone else, so we never see them. The page’s security policy only lets it load content from p7m.pro itself and connect to nothing else. E-mail messages inside signed files are shown in an isolated frame that blocks scripts and images from other websites.

Documents you save, such as the file inside the envelope or a PDF, are created on your device. We do not store your files: when you close or reload the page, they are gone from it.

What is processed when you visit the site

Like any website, p7m.pro receives technical connection data with each request: your IP address, the date and time, the page or file requested, and your browser’s user agent. This data is needed to deliver the site and to protect it against abuse and attacks. Legal basis: our legitimate interest in running a working and secure site (Art. 6(1)(f) GDPR).

Our application does not keep request logs. Traffic passes through Cloudflare, which processes this data on our behalf to deliver the site and protect it. The site runs on servers of Hetzner in Germany.

Cookies

We do not use analytics, advertising or tracking cookies, so there is no cookie banner: there is nothing to consent to.

If you choose a language in the language menu, we store your choice in a cookie named NEXT_LOCALE for one year, so the site opens in that language next time. Cloudflare may set a security cookie (for example __cf_bm or cf_clearance) when it checks whether traffic comes from a bot. These cookies are needed for a function you asked for or for security, so the law does not require consent for them.

No analytics, no advertising

We use no analytics tools, no advertising, no social media plugins, and no fonts or scripts loaded from other websites. If this ever changes, we will update this policy first and ask for your consent where the law requires it.

If you write to us

If you email [email protected], we use your email address and what you write in order to answer you. Legal basis: Art. 6(1)(b) GDPR when your message is about using the service, otherwise our legitimate interest in answering (Art. 6(1)(f) GDPR). Email to this address is forwarded by Cloudflare Email Routing to our mailbox provider. We keep the correspondence for up to 24 months after the last message, unless the law requires us to keep it longer.

Service providers and transfers outside the EU

We use two providers that process data on our behalf: Cloudflare, Inc. (USA) for content delivery, security and email forwarding (Cloudflare privacy policy), and Hetzner Online GmbH (Germany) for hosting (Hetzner privacy policy).

Cloudflare may process data in the United States. It is certified under the EU–US Data Privacy Framework and also uses the European Commission’s standard contractual clauses. FLISTONE TECHNOLOGIES - FZCO is based in the United Arab Emirates, a country for which the European Commission has not adopted an adequacy decision: if you write to us, your message reaches us there directly, and we use it only to answer you.

We do not sell personal data and do not share it for advertising.

How long data is kept

Your files: never stored by us. Technical connection data: kept by Cloudflare only for a short time, to deliver and protect the site. The language cookie: one year, or until you delete it in your browser. Emails: up to 24 months after the last message.

Your rights

Under the GDPR you can ask to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To do so, write to [email protected]. We answer within one month.

You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21 GDPR). You are not obliged to give us any personal data, but without the technical connection data the site cannot be delivered to you, and without your email address we cannot answer you.

You can also lodge a complaint with a data protection authority: in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority of the country where you live or work.

We make no automated decisions about you.

Changes to this policy

If the way we process data changes, we will update this page and the date at the top. Larger changes, such as adding payments or analytics, will be described here before they take effect.