Companies / GMX (1&1 Mail)

GMX (1&1 Mail)

No statement found

GMX Mail · owned by United Internet (1&1)

No clear statement — assessed 26 Jul 2026

German webmail, not end-to-end encrypted, so the provider can read stored mail. Its full German privacy notice does disclose automated scanning of attachments — for viruses and malware, described as fully automated — and its security pages cover spam filtering. Neither those documents nor any other tracked page mentions CSAM detection, hash matching, or the EU derogation. What GMX scans for, it names; child-abuse scanning is not on that list, and neither is it ruled out in writing.

“auf Viren, Malware und Ähnliches gescannt” — from GMX (1&1 Mail)'s German privacy notice, as archived here

Sources: Datenschutzhinweise (German, full) · Archived privacy policy (EN) · what this status means · dispute it

What we watch for — GMX has no clear public position. We watch for any statement either way — a scanning disclosure appearing in these documents, or an explicit denial. Either would change this status the day it's published.

Services: GMX Mail
Status: No statement found
Held since: 26 Jul 2026
Documents: 5 tracked
Changes recorded: 9 — latest 22 Oct 2026

Tracked documents

Document	Last fetched	Size	Hash	Snapshot
Privacy Policy www.gmx.com	1 Oct 2026	49,084 chars	a159b0d188a6	text · raw · wayback
Terms & Conditions www.gmx.com	1 Oct 2026	10,520 chars	20de03c9bd3b	text · raw · wayback
Google Play Data Safety play.google.com	26 Jul 2026	4,466 chars	78a4dfcd6e0f	text · raw · wayback
Datenschutzhinweise (German, full) agb-server.gmx.net	22 Oct 2026	57,264 chars	b499dcad0aae	text · raw · wayback
E-Mail Sicherheit www.gmx.net	22 Oct 2026	10,478 chars	58cf4bc38c1e	text · raw · wayback

text is the extracted record we hash and diff; raw is the page's original HTML kept verbatim as evidence — it renders without its styling here, by design.

What we searched for

A status that rests on absence is only as good as the search behind it. Every one of GMX (1&1 Mail)'s 5 archived documents (131,817 characters) was searched for the same published vocabulary used on every company here — in English, German and French. The search is a plain function of the archived text and re-runs whenever that text changes, so it always describes the documents listed above. Re-run it against this archive yourself with tools/scan-terms.mjs.

Term	Hits	In context
scan / scanning / gescannt	1	“…n die GMX-Cloud hochgeladene Dateien werden zu deiner und unserer Sicherheit auf Viren, Malware und Ähnliches gescannt. Dabei werden auch Daten in den Dokumenten verarbeitet. Die Verarbeitung findet vollautomatisiert unter Einha…” — privacy-de

Found nowhere in these documents: Regulation 2021/1232 · derogation / Ausnahmeregelung / dérogation · Chat Control / Chatkontrolle · ePrivacy · CSAM / CSAE · child sexual abuse / Kindesmissbrauch · NCMEC / CyberTipline · PhotoDNA · hash matching / hash database · Internet Watch Foundation · automated detection / automatisierte Erkennung · classifier / machine learning detection · monitor content / review content

Record RSS ↗

22 Oct 2026 GMX (1&1 Mail) — Datenschutzhinweise (German, full) document +1 −1
22 Oct 2026 GMX (1&1 Mail) — E-Mail Sicherheit document +1 −1
20 Oct 2026 GMX (1&1 Mail) — E-Mail Sicherheit minor +2 −0
7 Oct 2026 GMX (1&1 Mail) — Datenschutzhinweise (German, full) document +6 −8
2 Oct 2026 GMX (1&1 Mail) — E-Mail Sicherheit document +194 −42
1 Oct 2026 GMX (1&1 Mail) — Privacy Policy minor +0 −2
1 Oct 2026 GMX (1&1 Mail) — Terms & Conditions minor +0 −2
13 Aug 2026 GMX (1&1 Mail) — Privacy Policy document +1 −1
28 Jul 2026 GMX (1&1 Mail) — E-Mail Sicherheit document +3 −1
26 Jul 2026 GMX (1&1 Mail) — Datenschutzhinweise (German, full) baseline first recording
26 Jul 2026 GMX (1&1 Mail) — E-Mail Sicherheit baseline first recording
26 Jul 2026 GMX (1&1 Mail) — Google Play Data Safety baseline first recording
26 Jul 2026 GMX (1&1 Mail) — Terms & Conditions baseline first recording
26 Jul 2026 GMX (1&1 Mail) — Privacy Policy baseline first recording