Terms & disclaimer

Short version: bot-msg.com is a free testing tool, provided as-is. Use it for testing, not for anything that matters, and you're responsible for what you send and where you send it.

1. What this is

bot-msg.com lets you create temporary HTTP endpoints ("inboxes") that capture requests sent to them, and lets you send test requests to webhook URLs ("webhook tester"). It's a development and testing tool. It isn't a production service, a message queue, a storage service or a delivery guarantee.

2. You're responsible for your use

• You're solely responsible for the requests you send through bot-msg.com, the content of those requests, and the systems you send them to.
• Only send test requests to webhooks and endpoints that you own or are explicitly authorised to test. Using the webhook tester to spam, flood, probe, attack or impersonate anyone else's systems is prohibited.
• You must follow the terms of any third-party service you interact with (for example Slack, Discord, Microsoft, Telegram, Google, GitHub or Stripe) and all applicable laws.
• Requests from the webhook tester are sent from bot-msg.com servers and identify themselves with a bot-msg.com webhook tester User-Agent. That doesn't make them anonymous, and it doesn't shift responsibility for them to us.

3. Don't send sensitive data

Don't send personal data, passwords, API keys, payment details, production secrets or anything confidential to an inbox or through the tester. Use dummy or test data. Anyone who has an inbox's private link can read everything in it, so treat that link like a password and share it carefully.

4. Data retention

• Inboxes self-destruct when their countdown reaches zero: 10 minutes by default, extendable up to a maximum of 2 hours remaining. When an inbox is destroyed, every request captured in it is permanently deleted and can't be recovered.
• The webhook tester relays your request and shows you the response. The request itself isn't stored on our servers. Your recent sends are kept only in your own browser tab (session storage).
• We keep anonymous aggregate counters (how many inboxes were created, requests captured and webhooks tested) and a short list of recent activity by country only. These contain no inbox addresses, keys, request contents or IP addresses.
• Email. If you use "Email this", we first send a one-time code to confirm the address is yours. After that, reports go only to that confirmed address, for 24 hours on that browser. Emails are sent through our email provider, Resend. We don't keep your address: we store only a one-way hash of it (for rate limits and the 24-hour confirmation), plus tester results for one hour so we can email exactly what we recorded. Emails are rate-limited per visitor, per address and site-wide.
• Our hosting provider may process technical data such as IP addresses to operate and protect the service.

5. Fair use and abuse

The service is rate-limited, and bodies are capped at 256 KB. We may block, throttle or delete any inbox, IP address or traffic that we consider abusive, at any time and without notice. Report abuse to abuse@bot-msg.com.

6. No warranty

bot-msg.com is provided "as is" and "as available", without warranties of any kind, express or implied, including fitness for a particular purpose, availability, accuracy or security. Captured requests may be lost, delayed, truncated or deleted early. The service may change or stop at any time.

7. Limitation of liability

To the maximum extent permitted by law, the operators of bot-msg.com aren't liable for any direct, indirect, incidental or consequential damages, loss of data, loss of profit or any other loss arising from your use of, or inability to use, the service. That includes anything resulting from requests you send through the webhook tester or data you send to an inbox.

8. Changes

These terms may be updated at any time. Continuing to use bot-msg.com after a change means you accept the updated terms.

Last updated: 21 September 2026 (email added).