Privacy Policy
Last updated: 1 October 2026
This Policy explains how Easy Life sp. z o.o. handles personal data in connection with MBOX Browser: the website at https://mbox.easylifepoland.com/ (the “Website”), the free web app at https://mbox.easylifepoland.com/app/ and the downloadable MBOX Browser Pro (together the “App”), and purchases of MBOX Browser Pro.
1. Controller and contact
The controller of the personal data described in this Policy is:
Easy Life sp. z o.o.
ul. Hoża 51, 00-681 Warszawa, Poland
KRS 0000716356 · NIP 1182164729 · REGON 369376133
Email: mbox@easylifepoland.com
We have not appointed a data protection officer. Questions and requests about personal data may be sent to the email or postal address above.
2. Your email files never reach us
The App runs entirely in your web browser. When you open an .mbox or .eml file, it is read and displayed on your own device. The contents of your files, including messages, addresses and attachments, are never transmitted to us or to any third party, and we have no access to them. We therefore do not process the personal data contained in your files, neither as a controller nor as a processor.
Remote content. Emails can contain images and other content hosted on third-party servers. The App blocks such content by default. If you choose to show it, your browser connects to those servers, which may receive your IP address and learn that the message was opened, as in any email program. Links you open from an email lead to websites governed by their own privacy policies.
3. Data stored on your device
The App remembers your language choice in your browser’s local storage. MBOX Browser Pro can also store an index of the archives you open (header details such as sender, recipients, subject and date) in your browser’s storage, so that they reopen faster. This data stays on your device, is never sent to us and is used only to provide the functionality you request. Because this storage is strictly necessary for a service you have asked for, it does not require consent. You can delete it at any time by clearing the site data in your browser.
4. Visiting the Website
The Website and the free App are delivered through Cloudflare. When your browser requests a page, the hosting and security infrastructure necessarily processes technical information such as your IP address, the date and time of the request, the requested address, browser and device information, referrer and security events. We process this information to deliver the Website, keep it available and protect it against abuse. The legal basis is our legitimate interest in operating a secure and reliable website, under Article 6(1)(f) GDPR.
5. Cookies and audience measurement
The Website does not set cookies and does not use advertising technology. We use Cloudflare Web Analytics to understand how many people visit the Website and which pages they read. It does not use cookies, does not store or read anything on your device, does not fingerprint your browser and does not follow you to other sites. It records the page requested, the referring page and general technical details such as country, browser and device type, aggregated into counts. The legal basis is our legitimate interest under Article 6(1)(f) GDPR in understanding whether the Website is read and works properly. Audience measurement never has access to the files you open in the App.
6. Buying MBOX Browser Pro
MBOX Browser Pro is sold through Gumroad, Inc. (USA), which acts as the reseller and merchant of record: it processes your payment, handles applicable taxes, issues receipts and delivers the download. Gumroad processes your payment and contact details under its own privacy policy. We never receive your full card details.
To deliver and support your purchase, we receive from Gumroad your name, email address, country, the product purchased, the purchase date and the price. We use this data to provide the product and its updates, handle refunds and support requests, and keep accounting records. The legal bases are the performance of a contract under Article 6(1)(b) GDPR, our legal obligations under Article 6(1)(c) GDPR (tax and accounting) and our legitimate interest in establishing and defending legal claims under Article 6(1)(f) GDPR.
When a new version of Pro is released, we may notify buyers by email through Gumroad, as part of the product you bought. We do not send marketing emails without your consent.
7. Contacting us
If you contact us by email or post, we process the information you provide, such as your name, contact details, message and attachments, to respond and handle your request. Depending on the subject, the legal basis is the performance of a contract or steps taken at your request (Article 6(1)(b) GDPR), a legal obligation (Article 6(1)(c) GDPR) or our legitimate interest in handling correspondence (Article 6(1)(f) GDPR).
8. Recipients
Personal data may be processed by service providers that support the hosting, delivery, security and audience measurement of the Website (Cloudflare), sales and delivery of Pro (Gumroad) and the operation of our email (Google). Data may also be disclosed to our accountants and professional advisers, courts or public authorities where necessary to comply with the law or to establish, exercise or defend claims. We do not sell personal data.
9. Transfers outside the EEA
Some of these providers may process data outside the European Economic Area. Where GDPR requires a transfer mechanism, transfers are based on an adequacy decision, including the EU-US Data Privacy Framework where applicable, Standard Contractual Clauses, or another safeguard permitted by Chapter V GDPR. You may contact us for information about the safeguards relevant to your data.
10. Retention
- Routine server and security logs available to us are kept for up to 30 days, unless a longer period is necessary to investigate a security incident or handle a legal claim.
- Purchase records are kept for the period required by tax and accounting law.
- Correspondence is normally kept for up to 2 years after the matter is closed, or longer where it concerns a contract, complaint or claim, until the relevant limitation period expires.
11. Your rights
Subject to the conditions of the GDPR, you may request access to your personal data, rectification, erasure, restriction of processing and data portability, and you may object to processing based on our legitimate interest. To exercise a right, write to mbox@easylifepoland.com. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, or with another competent supervisory authority.
12. Changes to this Policy
We may update this Policy when the App, the Website or applicable requirements change. The current version and its date will always be available on this page.