Back to MailLama

Privacy Policy

Last updated: 10 October 2026

This policy explains which personal data is processed when you visit the MailLama website and when you use the MailLama app.

Controller

Email: info [at] devmil [dot] de

Overview

This website and MailLama are built to collect as little as possible. Devmil Solutions does not run analytics, advertising or tracking. The website sets no cookies and loads nothing from third-party servers. MailLama does not send your mail, your contacts or your Proton credentials to Devmil Solutions.

Hosting

The website is hosted by GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When you visit the site, GitHub processes technical access data to deliver it and keep it secure: IP address, date and time, requested page, referrer, browser and operating system. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and reliable website).

GitHub may process data in the USA. GitHub, Inc. is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR). Details: GitHub privacy statement. Devmil Solutions has no access to these logs.

Local storage in your browser

When you choose a language, the website stores that choice (preferred-language) in your browser’s local storage. The other Devmil Solutions websites under devmil.de read the same entry, so they open in the same language. The site stores nothing else. This data stays on your device, is never transmitted, and can be deleted in your browser at any time. Legal basis: § 25(2) no. 2 TDDDG (strictly necessary for a service you requested).

The app

MailLama is a desktop client for Proton Mail. It is not affiliated with or endorsed by Proton AG. Proton Mail is a service of Proton AG.

Connections to Proton

MailLama signs in with your Proton account and connects directly to the servers of Proton AG under proton.me. Proton’s official Mail SDK, which is built into the app, handles sign-in, two-factor authentication, encryption, sync and sending. Your mail, contacts, password and codes go only to Proton, never to Devmil Solutions. Proton AG is responsible for processing your account data; its privacy policy applies.

If Proton’s servers cannot be reached directly, the SDK can use Proton’s alternative routing. It then asks public DNS-over-HTTPS resolvers (Cloudflare, Google, Quad9) for other addresses of Proton’s service.

If the telemetry setting of your Proton account is on, the SDK sends usage and performance data, such as how long decrypting a message took, to Proton. MailLama has no setting of its own for this; you change it in your Proton account settings.

When Proton asks for human verification, MailLama shows Proton’s verification page in an embedded window that only opens that page.

Remote content and links

Remote images in messages are blocked by default. If you allow them, they are loaded through the SDK: through Proton’s image proxy if you turned it on in your Proton account, otherwise directly from the sender’s server, which then learns your IP address. Links in messages open in your browser only after you confirm.

No Devmil servers, no tracking

MailLama contains no analytics, no advertising and no crash reporting. It does not check for updates and contacts no server of Devmil Solutions. New versions are published on this website.

Data on your device

• Your Proton password and two-factor codes are passed to the SDK for sign-in and are never stored.
• The key that protects your Proton session on this device (its access tokens and the passphrase of your mail keys) is stored in the macOS Keychain or, on Linux, the Secret Service, under de.devmil.maillama.mail.session.
• The SDK keeps your session, a local copy of your mail and a cache of up to 512 MiB, so mail stays readable offline. If you turn on content search, it builds a search index on your device. App settings, theme packages and saved searches are stored in settings.json and themes/. Everything is in the app folder: ~/Library/Containers/de.devmil.maillama/ on macOS, ~/.local/share/de.devmil.maillama/ on Linux.
• Attachments you preview or drag out of a message are written as temporary files that only your user account can read. They are removed after use, at sign-out or at the next start.
• MailLama writes log files to the logs/ folder of the app folder. Its own entries leave out addresses, links, paths, identifiers and codes. The SDK writes its own log files to the same folder, which can contain shortened account and event identifiers. Logs never leave your device. Export diagnostics in the settings saves a copy of MailLama’s logs to your downloads folder, only when you ask for it.
• Signing out signs you out at Proton and deletes the account’s local mail data and caches. Settings, theme packages and logs stay until you delete the app folder.

Permissions

MailLama asks to show notifications for new mail. By default they show the sender and subject; you can turn the preview or the notifications off in the settings. On macOS the app runs in the App Sandbox with access to the network, to printing and to files you choose, for example attachments. It does not use the camera, the microphone, your location or your contacts.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You also have the right to lodge a complaint with a supervisory authority, for example the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

To exercise your rights, contact info [at] devmil [dot] de.

Changes

This policy is updated when the website or the app changes. The current version is always available on this page.