Privacy is built in. Out of the box only a short body excerpt is stored — no full body, no raw message. Sensitive mails such as password resets, confirmation links and one-time codes are detected by subject and logged as metadata only, so the reset link never lands in the log. Optional encryption derives its key from the Joomla site secret and keeps no key material in the database, and captured attachments live outside the web root, reachable only through an access-controlled controller. Reading message bodies is a separate permission from viewing the list.

When something goes wrong you see it at once, with optional throttled admin alerts, and you can resend a lost mail in one click — to the original recipients or another address, with built-in abuse limits. A dashboard shows volume, peak hours and failure rates; log rules decide what is stored while display rules only hide rows; a CSV export is safe against spreadsheet formula injection; scheduled tasks keep the the database and attachments tidy. Administrator-only; strictlylocal, no data leaves your site.