Privacy

Controller

The controller for our data processing in connection with this website and the FOLD app is

Datargo GmbH
Omniturm Frankfurt, Neue Mainzer Str. 52-58, 60311 Frankfurt am Main
legal@datargo.de

What this website processes, and what it does not

This marketing site is statically built. There is no analytics script in your browser and we set no cookies. We measure page views on the server with our own Umami instance, as explained below.

• No Google Analytics, no Matomo, no pixel.
• No cookies, neither functional nor advertising cookies.
• No third-party embeds (no YouTube, Vimeo or maps). The fonts are served from the same website domain; loading the page opens no connection to a font service.

Hosting through Cloudflare

The marketing website at foldmail.app and the documentation at docs.foldmail.app are delivered through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, acting as our processor (Art. 28 GDPR, on the basis of Cloudflare’s data processing agreement). When you open a page, Cloudflare processes technically necessary connection data, in particular your IP address, the requested address, date and time and the user agent, in order to deliver the pages and to fend off attacks. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in fast and secure delivery).

Data may be transferred to the United States in the process. Cloudflare is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses apply in addition.

Language

The site exists in nine languages and never switches language on its own. Your browser tells every website which languages you prefer; a script of this site compares that list on your device with the languages of the page and, if they differ, offers the matching version in a small notice. Nothing is transmitted for this. When you choose a language in the menu, in the footer or in the notice, or close the notice, the site stores the chosen language code in your browser’s local storage (key fold.lang), so that the notice does not come back. The value contains no identifier and never leaves your browser; you can delete it at any time in your browser’s settings. The documentation at docs.foldmail.app behaves the same way. Legal basis: Section 25 (2) no. 2 TDDDG (storage strictly necessary for the language choice you asked for) and Art. 6 (1) (f) GDPR.

Documentation at docs.foldmail.app

The documentation uses the hosting described above. It sets no cookies, embeds no chat window or form, and loads fonts from its own domain. The Umami measurement described below applies only to the marketing website at foldmail.app.

Website statistics with Umami

We measure page views on foldmail.app using the open-source software Umami, which we operate ourselves at analytics.datargo.com on a server in Frankfurt am Main, Germany. Cloudflare forwards the measurement server-side from the request your browser already makes to load the page. Your browser loads no analytics script and makes no separate request to Umami. This measurement sets no cookies and uses no local storage on your device.

The forwarded data consists of the requested page, referrer, browser user agent, preferred language and IP address. Only utm_ campaign parameters are kept in page and referrer addresses; advertising click identifiers are removed and may be represented by general campaign labels. Umami uses the IP address and user agent to derive a pseudonymous session identifier and location information. The analytics database stores page views and derived information such as browser, operating system, language and location; it does not store the IP address as an analytics field. This is separate from the hosting providers’ processing of connection data.

We use these statistics to understand which pages and campaigns bring visitors to the website. This measurement does not cover docs.foldmail.app, downloads or the app’s update and provider-list requests. If your browser sends DNT: 1 (Do Not Track) or Sec-GPC: 1 (Global Privacy Control), we do not forward the measurement to Umami.

Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in understanding and improving our website’s reach. You can object under Art. 21 GDPR, including by enabling one of the browser signals above or writing to legal@datargo.de.

The statistics currently remain stored until they are deleted; no automatic deletion period is configured.

Chat window and release notification

The chat window at the bottom right and the release notification form on the download page are served by the customer system of Datargo GmbH at crm.datargo.com. When the page loads, your browser fetches the chat script from there, which transmits your IP address. The chat window keeps only two values in your browser’s local storage, whether it is open and how many unread messages it shows (key __datargo_widget_…); no identifier.

If you write a chat message, or enter your email address in the form and send it, the content is transmitted to that system and stored there so that we can reply, or write to you once when FOLD is released. Legal basis for the notification: Art. 6 (1) (a) GDPR (your consent by sending the form, which you can withdraw at any time); for the chat: Art. 6 (1) (b) GDPR (steps taken at your request prior to a contract) and Art. 6 (1) (f) GDPR. We delete the address once the notification has been sent, or earlier when you withdraw your consent. Without JavaScript the form opens your mail client instead.

Email contact

If you reach out by email (hello@datargo.com, security@datargo.com, legal@datargo.de), we process the contents of your message and your email address to reply. Legal basis: Art. 6 (1) (b) or (f) GDPR. We keep this correspondence for as long as needed to answer your request and to satisfy statutory retention duties.

Your rights

Under the GDPR you have the right to

• Access the data we hold about you (Art. 15)
• Rectification of incorrect data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Lodge a complaint with a supervisory authority (Art. 77)

Please direct requests to legal@datargo.de.

About the FOLD product app

This privacy notice describes the marketing website and the FOLD app. FOLD has no usage telemetry and no crash reporter. The app stores and processes your mail on your device and communicates directly with the mail servers you configure; it does not automatically transmit your mail content to Datargo.

Depending on the feature you use, the app connects to DNS, to your domain’s autoconfig file during setup, to Google for OAuth sign-in, and to the sender’s hosts for BIMI logos and certificates once DMARC has passed. Remote images in mail are fetched from their source hosts when you allow them or enable an automatic loading exception; those hosts receive the connection data of the request.

During account discovery, FOLD may fetch the signed provider bundle from the fixed addresses https://dl.foldmail.app/updates/providers.json and https://dl.foldmail.app/updates/providers.json.ed25519. These requests do not include the mail domain you are setting up, a device identifier, settings or mail content. They are ordinary HTTPS requests, so the receiving server processes connection data such as the IP address and user agent. The production cascade does not query Mozilla’s central ISPDB with your mail domain.

Sync through iCloud is optional and runs through your own Apple account. The planned direct-download edition for macOS includes an automatic update check against https://dl.foldmail.app/updates/appcast.xml, without a FOLD device identifier. This direct-download edition is not yet publicly available; the App Store editions receive app updates through Apple.

Last updated: 2026-10-11 (Cloudflare hosting and server-side website statistics).