Privacy Policy

Last updated: September 2026.

Connected Gmail accounts

InboxCan uses Google OAuth and requests read-only Gmail access for accounts intentionally connected by the site administrator. Passwords are never requested or stored.

Message metadata

For live testing, the application temporarily processes sender information, subject lines, Gmail placement labels, snippets and email headers. Public results mask sender addresses before they leave the server.

Retention

Live test records stored by the application are automatically deleted after five minutes. Google remains the source of the original messages in the connected Gmail accounts.

Anonymous audience metrics

InboxCan records an anonymous hashed visitor identifier, broad country when supplied by the hosting network, device category and last activity time to show aggregate traffic in the private control panel. Raw IP addresses, exact city and precise location are not stored.

Cookies and advertising

Essential cookies are used for security and administrator sessions. If advertising is enabled, Google AdSense or other configured advertising services may use cookies or similar technologies according to their own policies.

Contact

For privacy questions, use the contact page.