Privacy policy

Your files stay on your device

When you choose a file, it is read directly in your browser. The file and its contents (emails, attachments, medical images and the personal data in them) are not uploaded to our servers or sent to anyone else, so we never see them.

Files you save, such as attachments, .eml messages, ZIP files or PNG images, are created on your device. We do not store your files: when you close or reload the page, they are gone from it.

DICOM images contain health data. Because they never leave your device, we do not receive or process them.

What is processed when you visit the site

Like any website, cantopen.com receives technical connection data with each request: your IP address, the date and time, the page requested, and your browser’s user agent. This data is needed to deliver the site and to protect it against abuse and attacks. Legal basis: our legitimate interest in running a working and secure site (Art. 6(1)(f) GDPR).

This data is processed by our hosting and content-delivery providers on our behalf, only to deliver the site and to protect it.

Cookies

cantopen.com sets no cookies of its own, and we do not use advertising or tracking cookies. Our visit statistics use no cookies or identifiers, cover only this site and give us only aggregated figures, so we treat them like technical tools that need no consent. That is why there is no cookie banner.

Our content-delivery and security provider may set a short-lived third-party security cookie (about 30 minutes by default) when it checks whether traffic comes from automated bots. This is a technical cookie, needed for security, so it is exempt from consent (Art. 5(3) of the ePrivacy Directive).

Visit statistics, no advertising

To see which pages are used and how fast they load, we use cookie-free visit statistics provided by our content-delivery and security provider. When a page loads, a small script records the page address (without any query parameters), the referring page, the type of browser, operating system and device, the country (derived from your IP address), and performance measurements such as load times and how quickly the page responds. It sets no cookies, stores nothing on your device and does not use identifiers to recognise you on later visits or on other sites. It never receives your files, their names or their contents. We see only aggregated figures. Legal basis: our legitimate interest in understanding how the site is used and improving it (Art. 6(1)(f) GDPR). If you block the script in your browser, every function of the site still works.

We use no advertising and no social media plugins.

If you write to us

If you email support@cantopen.com, we use your email address and what you write in order to answer you. Legal basis: Art. 6(1)(b) GDPR when your message is about using the service, otherwise our legitimate interest in answering (Art. 6(1)(f) GDPR). We keep the correspondence for up to 24 months after the last message, unless the law requires us to keep it longer. Please do not send us your files or medical images: we do not need them to answer you.

Service providers and transfers outside the EU

We use carefully selected providers that process data on our behalf, under data-processing agreements: a hosting provider in the EU, a content-delivery and security provider in the EU and the United States, and an email provider in the United States. The list of providers is available on request at support@cantopen.com.

Transfers to the United States rely on the EU–US Data Privacy Framework and on the European Commission’s standard contractual clauses. FLISTONE TECHNOLOGIES - FZCO is based in the United Arab Emirates, a country for which the European Commission has not adopted an adequacy decision; we access data from there under standard contractual clauses or, for emails you send us, because it is necessary to answer you (Art. 49(1)(b) GDPR). For a copy of the safeguards, write to support@cantopen.com.

We do not sell personal data and do not share it for advertising.

How long data is kept

Your files: never stored by us. Technical connection data: kept only as long as needed to deliver and protect the site. The security cookie: about 30 minutes by default. Visit statistics: we see only aggregated figures that do not identify you, kept only as long as they are useful for comparing how the site is used over time. Emails: up to 24 months after the last message.

Your rights

Under the GDPR you can ask to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To do so, write to support@cantopen.com. We answer within one month.

You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21 GDPR). You are not obliged to give us any personal data, but without the technical connection data the site cannot be delivered to you, and without your email address we cannot answer you.

You can also lodge a complaint with the data protection authority of the country where you live or work.

We make no automated decisions about you.

Changes to this policy

If the way we process data changes, we will update this page and the date at the top. Larger changes, such as adding payments or new providers, will be described here before they take effect.