Last updated: 30 October 2026. This policy covers the Mailbox Storage Inspector extension for Plesk and describes what it reads, where the data stays, and how long it is kept. It is published at this URL and linked from the extension metadata.
What the extension does
It reads mailbox storage metadata on the Plesk server so an administrator can see which mail folders use the most space, and can rebuild a mailbox’s maildirsize quota-accounting file when that file is stale or corrupt.
Information processed
- Mailbox address and domain name.
- Mail folder names.
- Per-folder message counts and sizes.
- Mailbox quota,
maildirsizetotals and on-disk file totals. - Scan timestamps and duration.
- For a reset: the administrator login, timestamp, mailbox address, before and after accounted size and message counts, and the backup filename.
The extension does not read, store, transmit or display message bodies, headers, subjects or attachments; mailbox passwords; or customer contact details beyond the mailbox address and domain.
Where information is stored
All extension data stays on the Plesk server, under /usr/local/psa/var/modules/mailbox-storage-inspector/. Reset events are also written to Plesk’s own Action Log, which is managed by Plesk and subject to the hosting provider’s Plesk configuration.
The extension does not send data to Carl Swart, to carlswart.com, or to any third-party service. There is no telemetry, analytics or external API call.
Why it is processed
- To diagnose mailbox storage usage for support requests.
- To repair stale mailbox quota accounting.
- To keep an audit trail of administrative resets.
Retention
- Scan cache: 90 days.
- Reset backups: 30 days, also capped at 20 per mailbox.
- Reset audit entries: 12 months.
- Reset tokens and interrupted scan temp files: 1 hour.
- Uninstalling the extension removes its runtime data directory.
- Plesk’s Action Log retention is controlled by Plesk, not by this extension.
Access
Version 1 is admin-only. Only Plesk administrators can open the extension, run scans or reset quota accounting. Resellers and customers cannot access it.
Sharing
The extension does not share data with third parties. Data may be disclosed only if required by applicable law or a valid legal request.
Security
Data files are created with restrictive permissions: 0600 for files and 0700 for directories. Scans and resets run through a privileged helper that validates the mailbox path. The extension never modifies message files.
Your choices
An administrator can delete cached scans, reset backups and audit entries from the server at any time, or uninstall the extension to remove its data directory. Deleting a scan cache does not affect mail.
Contact
Use the contact page for questions about this policy or the extension.
Changes
If this policy changes, the updated version will be published at this URL with a new last-updated date.