Legal
Privacy Policy
This self-hosted smtp.dev clone stores only the data needed to run a local email testing sandbox.
Data stored by the sandbox
The application stores user account records, domains, sandbox email accounts, mailboxes, API token metadata, message metadata, message bodies, raw RFC 5322 email source, headers, attachments, delivery/authentication result fields, and operational logs generated by the web and SMTP processes.
How data is used
Stored data is used to authenticate users, route inbound test email, render the web UI, serve the REST API, retain raw message source, and support local debugging workflows. This clone does not include hosted billing, advertising, analytics resale, or third-party marketing integrations.
Retention and deletion
Messages may expire through the configured retention cleanup job or a per-message expiry time. Users with access to this instance can delete accounts, tokens, messages, and domains through the UI or API where implemented. Backups, logs, and filesystem snapshots are controlled by whoever operates the self-hosted instance.
Operator responsibility
If you run this instance for a team, you are responsible for securing the server, database, storage directories, logs, backups, and network access. Do not send sensitive production mail to a development sandbox unless your deployment is designed and approved for that data.