Privacy Policy
Last updated: August 2026
1. What We Collect
When you create an account, we collect:
- Email address (for authentication)
- Name (optional)
- Usage data (inbox creation count, API calls)
Emails received by your inboxes are stored temporarily according to your plan's retention period (24 hours for Free, 48 hours for Solo, 7 days for Pro, 30 days for Team) and then permanently deleted.
2. How We Use Your Data
- Provide the email testing service
- Enforce plan limits and usage quotas
- Send service-related notifications (downtime, plan changes)
We do not sell your data to third parties. We do not use your data for advertising.
3. Data Storage
Your data is stored on encrypted servers. Passwords are hashed with bcrypt (12 rounds). API keys are stored as-is but shown only once at creation — we display a preview after that.
4. Email Content
MailCatch is designed for test emails only. Emails sent to your inboxes are stored for the retention period, then permanently deleted. We do not read, analyze, or share email content beyond providing the service (OTP extraction, webhook delivery).
5. Your Rights
- Request a copy of your data
- Delete your account and all associated data
- Export your inbox history
Contact [email protected] for any privacy requests.
6. Payment Processing
We use Paddle.com as our Merchant of Record. When you subscribe to a paid plan, Paddle processes your payment and handles tax/VAT collection. Paddle may collect your name, email, billing address, and payment method details according to their own privacy policy. We do not store your payment card details.
7. Cookies
We use localStorage for authentication tokens. We do not use tracking cookies or third-party analytics.