Privacy Policy
Sand Inbox is a local-only SMTP testing application designed for software development. This Privacy Policy explains how the app handles data.
1. 100% Local Operation ¶
Sand Inbox runs entirely on your own machine. It does not:
- connect to the internet,
- send telemetry or analytics,
- upload logs or message data,
- relay email to external MTAs, or
- communicate with any remote server.
All operations happen inside your local environment. No data is transmitted to us or to any third party.
2. Information Stored Locally ¶
Sand Inbox stores only the information required for local SMTP testing, such as:
- email messages received by the local SMTP server,
- message metadata (headers, sender and recipient addresses, timestamps),
- server configuration and developer settings you choose.
Messages and headers are kept as received. A Received
header is added by Sand Inbox to indicate local delivery (identifying
the app and your machine as the receiving host).
All of this data remains on your device. None of it leaves your environment unless you explicitly copy or move it elsewhere.
3. No Email Relaying ¶
Sand Inbox does not relay messages to other mail servers or MTAs and does not send email to the public internet.
Any email delivered to Sand Inbox stays inside the application and is available only for local inspection and debugging.
4. No Accounts, No Registration ¶
Sand Inbox does not require you to create an account, sign in, or provide an email address or any personal profile information.
We do not collect or maintain any user-identifying information.
5. Privacy and Security ¶
Because Sand Inbox operates strictly locally, you control all data handled by the app.
The security of your messages and configuration depends on your own device, operating system, and network configuration (for example, if you intentionally expose the SMTP port beyond localhost).
Sand Inbox itself does not open external connections. SMTP session commands are logged locally and tied to the messages they deliver for debugging purposes.
6. Message Content and Previews ¶
Email content is displayed exactly as received. HTML parts are rendered using the native macOS WebView. It is assumed that you control the content being sent (test messages from your own services), and that no real end-user inboxes are being viewed.
7. Your Data, Your Control ¶
You may delete stored emails, logs, and configuration files at any time by clearing the data directories used by Sand Inbox. Removing the app will delete its local container, but copies in backups (e.g., Time Machine) or user-managed storage will remain until you remove them. Sand Inbox does not sync data to iCloud unless you explicitly enable such storage yourself.
8. Changes to This Policy ¶
If future versions of Sand Inbox change how data is handled, this Privacy Policy will be updated accordingly. The latest version will always be available on the official website or distribution page.
9. Contact ¶
If you have questions about this Privacy Policy, you can contact:
João Sampaio
sand-inbox@jsmp.me
Apple, TestFlight, macOS, iCloud, and Time Machine are trademarks of Apple Inc.