Privacy Policy

Last updated: November 2026.

Connected Gmail accounts

InboxCan uses Google OAuth and requests read-only Gmail access for accounts intentionally connected by the site administrator. Passwords are never requested or stored.

Message metadata

For live testing, the application processes only the metadata needed for placement monitoring, such as sender information, subject lines, Gmail labels and selected headers. Message bodies and Gmail snippets are not returned to the public browser.

Retention

Live test records are automatically deleted after the configured short retention window. Privacy-safe placement aggregates may be retained longer for dashboard analytics without storing message bodies.

Anonymous audience metrics

InboxCan records an anonymous hashed visitor identifier, broad country or city only when supplied by the hosting network, device category, browser, operating system, referrer and page activity for aggregate private analytics. Raw IP addresses are not stored.

Cookies and advertising

Essential cookies are used for security and administrator sessions. If advertising is enabled, Google AdSense or other configured advertising services may use cookies or similar technologies according to their own policies.

Contact

For privacy questions, use the contact page.