Agreement
By accessing or using MailDrop, you agree to this acceptable-use policy and to the privacy notice. If you do not agree, do not use the service. If you use MailDrop on behalf of an organization, you confirm that you have authority to accept these terms for that organization.
The site operator may suspend, limit, or block access at any time to protect recipients, the sending domain, infrastructure, or other users.
Permitted use
You may use MailDrop to send a reasonable number of legitimate, individually addressed emails to people who expect to hear from you. Examples include sharing files with a small project group, sending an update to colleagues, or delivering information to clients who have asked for it.
MailDrop is intended for personal and small-group communication. It is not intended for bulk marketing, cold outreach, mailing lists, lead generation, or any use that resembles a commercial email service provider.
Recipient consent
You must have a lawful basis to contact every recipient. In particular, you must not:
- Send unsolicited commercial email, chain letters, or bulk advertising.
- Use purchased, scraped, rented, or harvested address lists.
- Continue contacting someone who has asked you to stop.
- Use MailDrop to evade spam filters, blocks, or a recipient's preferences.
- Misrepresent your identity, affiliation, or the purpose of the message.
Prohibited use
You must not use MailDrop to create, send, or facilitate:
- Unlawful, fraudulent, deceptive, harassing, threatening, or defamatory content.
- Malware, phishing, credential theft, or links to malicious destinations.
- Child sexual abuse material, exploitation, or content that endangers minors.
- Content that infringes intellectual property, privacy, or other rights.
- Impersonation of a person, company, brand, or domain you do not represent.
- Attempts to probe, overload, bypass, or reverse-engineer the service or its security controls.
- Automated submission through bots, scripts, or circumvention of rate limits, quotas, or recipient limits.
- Any use that would violate the sending domain's provider policies or applicable law.
The From address is controlled by the site operator. You may not attempt to change it, inject email headers, or use the service to impersonate another sender or domain.
Attachments
Only explicitly approved image and document file types may be attached. Executable, script, macro-enabled, and other blocked file types are rejected. Files are checked for count, size, type, and basic file signature. Attachment bytes are uploaded directly from your browser to a private temporary storage service, are not publicly accessible, and are deleted after the send attempt or by scheduled cleanup once an abandoned upload is more than one hour old.
You are responsible for ensuring you have the right to share every file you attach. Do not upload malware, illegal content, or confidential material you are not authorized to send.
Limits and availability
MailDrop applies recipient limits, attachment limits, request-size limits, per-IP rate limits, and a shared daily recipient ceiling. Limits may change without notice to protect the service. Attempts to bypass them can result in immediate blocking.
The service is provided on an “as available” basis. It may be unavailable during maintenance, provider outages, configuration changes, or capacity events. There is no guarantee of uptime.
Delivery is not guaranteed
Messages are sent from a fixed MailDrop address on the sending domain configured by the site operator. If the sending domain is not verified or its DNS records are incomplete, the email provider may reject the request; MailDrop reports that failure instead of claiming delivery.
A successful submission means the email provider accepted the request for delivery. It does not mean the message reached an inbox. Delivery can be delayed, filtered, bounced, rejected, or marked as spam by the recipient's provider. Delivery events and bounce information are maintained by the email provider, not by MailDrop.
Do not use MailDrop for time-critical, legally binding, medical, financial, or safety-critical communications where a failed delivery could cause harm.
Your content and responsibility
You retain responsibility for the content you submit. You grant the site operator and its infrastructure providers the limited permission needed to process, render, transmit, and deliver your message and attachments. You confirm that your content and recipient list comply with this policy and applicable law.
MailDrop does not claim ownership of your message. The application does not retain message content after the request, and temporary attachment storage is deleted after the send attempt or by scheduled cleanup once an abandoned upload is more than one hour old. The email provider may retain delivery records as described in the privacy notice.
Security
Do not attempt to access another person's data, interfere with the service, or test security controls without written authorization from the site operator. Report suspected vulnerabilities responsibly to the site operator. Do not include sensitive personal data in a message unless it is necessary and appropriate.
Disclaimer and limitation of liability
To the maximum extent permitted by law, the service is provided without warranties of any kind, express or implied. The site operator is not liable for indirect, incidental, special, consequential, or punitive damages, loss of data, loss of profits, failed delivery, or misuse of the service. Nothing in these terms limits liability that cannot be limited by law.
You agree to indemnify the site operator against claims arising from your content, recipient lists, or violation of this policy, to the extent permitted by law.
Changes and contact
This policy may be updated as the service or legal requirements change. The “last updated” date reflects the current version. Continued use after a change means you accept the updated policy.
Questions about this deployment should be directed to the site operator through the contact channel they publish for this site. This policy is a practical default for the application and is not legal advice; the site operator should review it for their specific jurisdiction and use case.