Privacy policy

Who we are

Fishi (fishi.email) is run by Cyber Experts, France. For any question about your data, write to contact@fishi.email.

What we process, and why

The email you forward to us (sender, subject, text, links and attachments) and the address you forward it from. We use them only to check the email and send you the result.

If you use a private address on the website: a random session cookie, so only your browser can see the result.

Your IP address and sender address, briefly, to prevent abuse (rate limits).

Anonymous visit statistics (Vercel Web Analytics), without cookies or advertising trackers.

How long we keep it

Fishi analyses the email in memory and keeps only the result (the report). The report is deleted automatically after 24 hours, or immediately if you use "Delete now" or ask us.

Our email provider, Resend, receives the emails sent to fishi.email and keeps incoming messages for a limited time under its own retention policy.

Anti-abuse counters expire within 24 hours.

When an email is a scam, we keep the addresses of the dangerous websites it links to (without the personal part of the link) to protect other people.

What we never do

We don't sell or rent your data, we don't use your emails for advertising, and we never use them to train AI models.

We only ever reply to the address that forwarded the email, and only when its provider confirms that address is genuine.

Who helps us run Fishi

Vercel (hosting, processing in Frankfurt), Resend (receiving and sending email, EU region), a Redis database in the EU (short-lived reports) and Neon (database of dangerous websites, Frankfurt). Some of these providers are US companies bound by the EU Standard Contractual Clauses.

Your rights

You can ask to access or delete your data, or object to its processing, by writing to contact@fishi.email. You can also complain to the CNIL (cnil.fr) or your local data protection authority.