Acceptable Use

What SarabMail inboxes may not be used for, and how to report abuse.

Inbound mail only

SarabMail receives mail. It does not send mail, and it must not be used to pretend that it does. Do not point people at an address as if it were a staffed mailbox for fraud.

Prohibited use

Do not use SarabMail for phishing, credential theft, malware, scams, fraud, or any attempt to impersonate a person or a company.

Do not use it to receive or store unlawful content, including child sexual abuse material, or to threaten, harass, or stalk someone.

Do not use it to break into accounts, evade a block that exists to stop abuse, or overwhelm another service with signups.

Do not try to read an inbox you do not control. Guessing addresses, scraping the site, or probing the API past the published rate limits is abuse.

Do not register a custom domain you do not control, and do not point a domain at SarabMail in order to intercept someone else's mail.

What we do about abuse

We may drop a message, expire an inbox, disable a domain, revoke an API key, or keep a minimal log needed to block a repeat. We do not promise to recover mail that was deleted for abuse.

Report abuse to abuse@sarabmail.com. Include the address, the time, and a short description. Product and billing questions still go to support@sarabmail.com. Payment disputes on a paid plan are also handled by Paddle, the Merchant of Record.

Acceptable Use · SarabMail