Who processes your data at mochela.it, which data, why, for how long, and how to ask to see it, correct it or delete it. In short: we keep as little as possible, and only in the European Union.
This is the notice required by Articles 13 and 14 of the European data protection regulation (Regulation (EU) 2016/679, "GDPR"). The rules of use are in the solidarity pact.
This is a translation: if the two versions differ, the Italian text applies.
Who is responsible for the data
The data controller is Alberto Brusoni, who runs mochela.it as a private individual, not for profit.
For any question about your data: info@mochela.it, also encrypted with OpenPGP.
The providers hosting the servers, in the European Union, process the data on the controller's behalf as data processors, under a contract as required by Article 28 of the GDPR: who sees it.
Which data, service by service
If you visit the website
- The access log: date and time, page requested, result, referring page and browser type.
- The server's error log may contain the IP address, but for one hour at most: then a program removes it.
If you use mail
- Your account (address, the name you choose, password stored only as a hash, settings) and your messages, with their headers (senders, recipients, dates), until you delete them; encrypted with your key, if you have turned on encryption on arrival.
- Technical logs, as on every mail server: for one hour at most they also contain IP addresses and names; after that only the time, the result and the domain of the addresses (
xxx@mail.com) remain, and after seven days they are deleted. - The list of IP addresses blocked for too many wrong password attempts: it protects the accounts and stays for as long as the block is needed.
If you use SimpleX
No account: the servers do not know who you are, nor who you talk to. They keep messages, encrypted, only until your app collects them, and for three weeks at most.
If you join a video conference
- No account for invited guests. The name you type when you join is seen by the other participants.
- Audio and video pass through the server only while the meeting is running. They are encrypted up to the server, not end to end: the details.
- The chat stays in memory and disappears after four hours. Files sent in the chat go from browser to browser, without touching the server.
- The server does not log your IP address.
- Recordings: only if whoever organises the meeting starts one, after telling the participants; while it records,
RECORDINGappears among the participants. Only the organiser can see and download them; on the server they disappear after five days and are not included in the backups.
If you donate
The name and payment reference that the bank or payment service shows us with the donation. They are used only to keep the project's accounts and to thank you; we do not publish them.
Backups
Accounts and messages are also kept in an encrypted backup, on disks kept offline, for six months at most.
Why we use it, and on what legal basis
| Why | Legal basis (GDPR, Art. 6) |
|---|---|
| Providing the mailbox, SimpleX and video conferences you asked for, under the pact | performance of the service you asked for (point b) |
| Replying to people who write and handling donations | steps taken at your request (point b) |
| Keeping the service secure and working: technical logs, blocking attacks, spam filtering, backups, website access log | legitimate interest in protecting the service and its users (point f) |
| Recording a meeting | consent of the participants, asked before it starts (point a) |
| Complying with a valid order from an authority | legal obligation (point c) |
No advertising, no profiling, no decisions taken by a program instead of a person. We do not read or analyse messages, except for the automatic checks against spam and viruses.
For how long
| Data | For how long |
|---|---|
| Website access log (no IP) | 7 days |
| IP addresses and names in technical logs | one hour at most |
| Technical logs with no IP or names | 7 days |
| Account and messages | as long as you keep them; deleted when you close the mailbox |
| Backups | 6 months at most |
| SimpleX messages not yet collected | 3 weeks at most |
| Video conference chat | 4 hours |
| Video conference recordings | 5 days |
| Messages you send us | as long as needed to reply |
| Donation data | as long as needed to keep the project's accounts |
What has been made anonymous can no longer be linked to you: that is also why we cannot find it again if you ask us.
Who sees it
- Whoever administers mochela.it, which today means the controller, and only when needed to run the service.
- The providers that rent out the machines, in Germany, Denmark and Spain. They are data processors, under a contract as required by Article 28 of the GDPR: they host the servers on behalf of mochela.it, do not use the data for anything else, and the data on the disks is encrypted.
- Who receives your mail and who you write to. A mail you send to someone whose mail is elsewhere reaches their provider: its rules apply there.
- An authority, only with an order that is valid under the law. We would hand over what we have, which is little.
We do not sell, rent or pass on data to anyone.
Outside the European Union
All user data is in the European Union.
One exception, which does not concern people: to recognise spam, the server checks the address of the server sending us a mail, or a fingerprint of the message (never its text), against public anti-spam lists, some of them run outside the Union.
Your rights
- Access (Art. 15): to know which of your data we hold and get a copy.
- Rectification (Art. 16): to have it corrected.
- Erasure (Art. 17): to have it deleted.
- Restriction (Art. 18): to have its use suspended, for example while we look into something you dispute.
- Portability (Art. 20): to take your messages and data away in an open format, to move them elsewhere.
- Objection (Art. 21): to object to uses based on our legitimate interest.
- Withdrawing consent (Art. 7): for a recording, at any time, without affecting what happened before.
- Complaint (Art. 77): if you think we handle your data badly, you can turn to the Italian Garante per la protezione dei dati personali or to the authority of the EU country where you live.
How to exercise them
Write to info@mochela.it, if you can from your mochela mailbox: that way we know it is really you. If you write from another address, we may ask you for confirmation.
We reply within one month, free of charge. If a request is complicated we let you know within the month and may take up to two more months, as the GDPR allows (Art. 12).
How we protect it
Encrypted disks, encrypted connections between the servers and to you, administration only inside an encrypted tunnel, passwords stored only as hashes, a second factor for accounts, encrypted backups kept offline. The details, limits included, are in the Nerd Lab and under Infrastructure.
If a breach ever put your data at risk, we would notify the Garante within 72 hours, and you too.
Minors
Only people aged 14 or over take part in the experiment (mailboxes and access to SimpleX): in Italy, that is the age from which people can give consent to these services on their own (Italian Privacy Code, Art. 2-quinquies). If we learn that a mailbox belongs to someone younger, we close it.
Changes to this page
If something important changes, we write it here and, to those with a mailbox, by mail, before the change takes effect.
Last updated: 19 October 2026.