Last updated 2026-09-07.
1. Mail you may not send
- Unsolicited bulk email. Every recipient must have given you their address in a context where mail from you is expected. Purchased, scraped or “appended” lists are not consent.
- Mail that hides who sent it. No forged headers, no misleading “from” names, no domains chosen to impersonate someone else.
- Phishing, malware or fraud of any kind, including credential-harvesting pages linked from mail you send.
- Mail that ignores an opt-out. If someone asks you to stop, stop — including replies asking not to be tracked.
- Content that is unlawful where you are or where the recipient is: harassment, threats, child sexual abuse material, incitement, or infringement of someone else's rights.
2. Tracking
Open and click tracking is provided for legitimate business correspondence. You may not use it to track people who have asked you not to, to build behavioural profiles of recipients who have not consented, or in a way that breaks the privacy law that applies to you. You are the controller of that decision; see the data processing information.
3. The service itself
- No attempts to access another workspace's data, to escalate privileges, or to bypass rate limits and quotas.
- No load testing, scanning or penetration testing without our written agreement. Reporting a vulnerability you found without doing that is welcome — see the security page.
- No reselling, sublicensing or sharing a workspace with people who do not have their own accounts.
- No automated use that degrades the service for others. Use the API and stay within its published limits.
- No connecting a mailbox you are not authorised to access.
4. What happens if you break this
Depending on what has happened we may rate limit sending, disable a feature, suspend the workspace, or terminate the account. For anything short of an emergency we will tell you what we saw and give you a chance to fix it. For active fraud, phishing or a legal obligation, we act first and explain afterwards.
5. Reporting abuse
If you have received mail sent through WaryMail that breaks this policy, tell us at hello@warymail.co.uk and include the full message headers. We investigate every report.