Maroon VPS Abuse accesses Gmail only after explicit administrator authorization and only with the Gmail read-only scope.
Email metadata and content are processed solely to identify Hetzner notifications, affected IP addresses, accounts, and managed servers. The service cannot send, edit, or delete email. OAuth refresh tokens are encrypted at rest and are not shared or sold.
Administrators can disconnect a mailbox at any time. Disconnecting removes the stored authorization token while operational abuse records are retained for security and audit purposes.
Contact: the support email displayed on the Google OAuth consent screen.