Privacy
Last updated: July 2026
This page explains what BansosMail stores, for how long, and who can access it.
Message contents
Message bodies and attachments are stored only for the 24-hour retention window and are readable only through the public inbox URL or a valid BM_ token. Administrators cannot read message contents.
Tokens and secrets
BM_ tokens are shown to the address owner in full, once, and are treated as sensitive credentials thereafter. Tokens are stripped from browser URLs before rendering and redacted from application logs.
Metadata
Aggregate counts (accepted / rejected messages, active inboxes, worker health) are used for service operations and never expose message contents.