Small by design
SpamCatcher handles email, so the safest feature is often the one we never add.
The service is intentionally narrower than a normal mailbox.
No composing or replies
SpamCatcher accounts cannot compose new messages or reply to senders. You can send a sanitized copy of an existing message to your verified account email.
This removes an entire category of abuse and keeps the product focused on receiving low-sensitivity messages.
No public inboxes
A SpamBox belongs to an authenticated account.
Messages are not intended to be exposed through public mailbox URLs.
Controlled forwarding only
SpamCatcher does not offer general forwarding or forwarding to arbitrary recipients.
Forwarding is limited to your verified account email and applies per message with strict rate and size controls. All images are removed from forwarded content, including embedded coupons, barcodes, and QR codes. View images in your SpamBox using Load images. Links remain and may contain tracking parameters.
Attachment handling
Supported PDFs that pass format checks and malware scanning are retained with their message for owner download and optional forwarding to the verified account email. Other files, files that cannot be scanned, and oversized or excess attachments are discarded. Scanning does not guarantee a file is harmless.
Supported embedded images, including coupon barcodes and QR codes, are retained with the message and follow the same deletion schedule.
Remote images do not load automatically
Remote image loading can reveal when and where a message was opened.
Images stay hidden until you choose Load images. Remote images are then fetched by your browser, which may disclose an open and your IP address to the image host.
Old mail is removed automatically
SpamCatcher is not an archive.
Ordinary messages expire after 30 days and are removed by background cleanup. Required preservation holds can override deletion. See the Privacy Policy for backup retention and account-deletion details.
Payments are handled by Stripe
SpamCatcher does not store raw payment-card numbers.
Stripe Checkout and Stripe's customer billing tools handle payment details.
Account security
The account system uses framework password hashing, rate limiting, secure sessions, and verified account-email recovery.
Responsible use
SpamCatcher is intended for lawful, ordinary consumer email.
Abuse can result in suspension or termination under the Terms of Service.
Report a security concern
Use https://account.thespamcatcher.com/abuse and select Security. Describe the issue without exposing passwords or other customers' data. Do not disrupt the shared service while investigating.
Sending a copy and file limits
You can make up to 25 send attempts in a rolling 24 hours, including failed attempts, and successfully send each message up to 3 times in that period. Supported PDFs are limited to 5 files, 5 MiB per file and 5 MiB combined per message. Forwarded copies omit all images, including embedded coupons, barcodes, and QR codes. Links may retain tracking parameters.