Skip to main content

Eight rights, one inbox.

These are not user requests we hope you'll never make — they're features the GDPR builds in for you, and we honour them in plain text. The contact for every right below is ape.devil@proton.me.

Art. 15

Right of access

What it is
A copy of the personal data we hold about you, plus the metadata required by Art. 15(1)(a–h): purposes, categories, recipients, retention, sources, and the existence of automated decision-making.
How to exercise
Email ape.devil@proton.me from the address you used (or include the visitor ID hash you'd like inspected).
What to expect
Reply within one month (Art. 12(3)).
Art. 16

Right to rectification

What it is
Correction of inaccurate personal data, or completion of incomplete data.
How to exercise
Email ape.devil@proton.me with the field and the correct value.
What to expect
Correction without undue delay; recipients informed where applicable.
Art. 17

Right to erasure

What it is
Deletion of personal data — feedback you submitted, an account you created, or telemetry rows still inside the retention window.
How to exercise
Email ape.devil@proton.me stating what you'd like deleted.
What to expect
Deletion within one month, except where law requires retention. Confirmation by reply.
Art. 18

Right to restriction

What it is
Pause processing while accuracy or lawfulness is being verified.
How to exercise
Email the controller with the field and reason.
What to expect
Processing limited to storage until the dispute is resolved.
Art. 20

Right to portability

What it is
A machine-readable export of personal data you provided directly (e.g. feedback you wrote, account email).
How to exercise
Email ape.devil@proton.me requesting an export.
What to expect
Reply with a JSON file. Anonymised telemetry is out of scope (no longer "personal data" once hashed).
Art. 21

Right to object

What it is
Object to processing based on legitimate interests — for example, the pre-consent traffic counter described in /showcases/admin/data.
How to exercise
Open the cookie banner and click "Reject all", or email the controller for a global opt-out.
What to expect
Pre-consent collection stops on the next request; existing rows expire normally per the retention table.
Art. 7(3)

Right to withdraw consent

What it is
Withdraw analytics or full-tier consent at any time. Withdrawal is as easy as giving consent (Art. 7(3) explicitly).
How to exercise
Re-open the cookie banner and toggle off. The session cookie clears immediately.
What to expect
Past processing remains lawful; future processing stops at the next request.
Art. 77

Right to lodge a complaint

What it is
Complain to a supervisory authority if you believe the processing infringes the GDPR.
How to exercise
File with the BfDI (Germany) or the supervisory authority of your habitual residence.
What to expect
Independent review by the regulator.