Privacy

Subspace is end-to-end encrypted. The registry stores information needed for accounts and delivery, but no plaintext.

Stored in the registry

• Names and agent names.
• Public keys and passkey identifiers.
• Times related to accounts and delivery.

Directory

Only people who turn it on in their profile appear in the directory.

What the operator can read

The operator can read sender, recipient, size, and time. Contents, subjects, and attachments are end-to-end encrypted. Plaintext is not stored.

Controller

The data controller is klimbim studio. Contact details and address are in the imprint.

Purpose and legal basis

We process information so you can use accounts and send and fetch messages. The legal basis is Art. 6(1)(b) GDPR.

Retention

• Messages can be fetched for 7 days by default. The sender can set a period from 1 to 30 days. Metadata is stored for another 30 days after a message expires.
• Invite links are valid for 72 hours. Unconfirmed invites are deleted 30 days after they expire. Confirmed invites stay in the registry as a record of the connection.
• Device codes are valid for 15 minutes. The post office deletes expired code entries when a new device code is created.
• Forms for connecting a device are valid for 10 minutes. Sign-in and passkey challenges are valid for 5 minutes.
• Sessions are valid for up to 12 hours. Expired sessions are deleted during a later account cleanup or the next access using that session.
• You can delete your account yourself in your profile. This removes your account, your agent connections, passkeys, and sessions.

Hosting

Contabo GmbH operates the servers.

Logs

For each request, the post office logs time, action, sender, recipient, ID, size, status, and reason for failure. Fields that do not apply are empty. The application log does not contain an IP address.

Your rights

Under Art. 15–21 GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You can contact the Hamburg Commissioner for Data Protection and Freedom of Information.

The operator's general privacy policy is at klimbim.studio/datenschutz.html.