Regal Send email logging: privacy modes, review and deletion

Updated September 20, 2026

Regal Send email logging records the result of WordPress email attempts so administrators can review transport acceptance, failures and safe diagnostic information. You can keep logging off, retain metadata without message bodies, or retain full content with encrypted attachment copies. The selected mode affects new emails only and never deletes existing records.

Choose a Regal Send email logging mode#

Open Regal Send > Settings and find Email logging. Choose one of these modes:

• Off: no email log row is created. Use this when you do not want Regal Send to retain email activity.
• Metadata Only: the recommended default. It stores status, date, mailer, sender, recipients, subject, safe source context, attachment metadata and redacted errors. It does not store message bodies, replay headers or attachment content.
• Full Logging: stores the metadata plus HTML and plain-text bodies, a small allow-listed header snapshot and encrypted attachment or inline-image copies.

Full Logging can retain personal, confidential or commercially sensitive information. Choose a retention period suitable for your organisation, privacy obligations and support needs. Automated retention runs in a later Regal Send phase; until then, use the manual deletion tools on Email Logs.

What Sent means in Email Logs#

A Sent status means the configured transport accepted the request. It does not prove that the recipient’s mail server delivered it to an inbox. Microsoft Graph HTTP 202, an SMTP acceptance response and PHP mail acceptance are all recorded as transport acceptance only.

If an accepted email does not arrive, check the recipient address, junk folder, provider message trace, domain authentication and provider policy. Failed records include a safe error code and readable recovery message where the transport supplied useful evidence.

Search and filter email logs#

1. Open Regal Send > Email Logs.
2. Use Search for a recipient address, From address, subject prefix or error prefix.
3. Filter by Sent or Failed status, mailer and a bounded local-date range.
4. Select a sortable Status, Date, Subject or Mailer heading when you need a different order.
5. Select View to open a record without loading message bodies into the main table.

The list loads 20 rows per page and fetches visible recipient information in one bounded query. On mobile, each row becomes a labelled card so status, recipient, subject and actions remain readable without uncontrolled horizontal scrolling.

Review a Metadata Only record#

The detail screen shows transport result, local timestamp, mailer, sender, To, CC, BCC and Reply-To recipients where present, subject, source, provider request details and safe failure information. It explicitly explains that the message body was not retained. Exact resend is unavailable because Regal Send cannot reconstruct content that was intentionally not stored.

Attachments are listed by safe filename, type and size. Their original server paths are never stored. A Metadata Only attachment is labelled as metadata only and cannot be downloaded.

Review a Full Logging record#

A Full Logging detail can show retained plain-text content and escaped HTML source. Regal Send displays HTML as source rather than executing it in the WordPress administration page. This avoids running scripts or remote resources from stored email content.

Attachment copies are authenticated-encrypted before being written to a private directory under WordPress uploads, outside the plugin directory. Downloads require the Regal Send management capability and a one-time WordPress nonce. Regal Send verifies the decrypted file hash before returning it. A missing, unreadable or corrupt copy is blocked with an explanation.

Delete email logs safely#

• Use Delete log on a detail screen to remove one record.
• Select rows and use the Delete bulk action to remove several visible records.
• Use Delete all logs to remove records in controlled batches of up to 250.

Deletion removes encrypted attachment copies first, then attachment and recipient rows, then the main email log. Delete all reports how many records remain so large datasets are processed in bounded batches. Deletion cannot be undone.

Export filtered email logs#

Select Export filtered CSV to download the active date, status, mailer and search view. The export includes identifiers, date, transport status, To, From, subject, mailer, safe error fields and duration. It excludes bodies and attachment contents.

CSV cells beginning with spreadsheet formula characters are prefixed safely to reduce formula-injection risk when the file is opened in spreadsheet software. The export is restricted to administrators with the Regal Send management capability and protected by a nonce.

Troubleshoot missing or incomplete logs#

No new records appear#

Confirm Email logging is set to Metadata Only or Full Logging. Logging Off preserves old records but writes nothing for new attempts. Save the setting before testing another email.

The message body is missing#

The record was created while Metadata Only was active. Enabling Full Logging changes future records only. Regal Send does not backfill bodies from WordPress, your mail provider or old log records.

An attachment says Copy unavailable#

The original file may not have been readable at send time, or private storage or encryption may have failed. The email result can still be recorded, but the unavailable copy cannot be downloaded or used for exact resend.

Search does not match words in a body#

Normal search intentionally covers recipient, From, subject and error prefixes. It does not search email bodies. This keeps queries bounded and avoids exposing content through broad searches.

Privacy and access boundaries#

Every list, detail, deletion, export and attachment-download action checks the Regal Send management capability. Secrets, access tokens, passwords, original attachment paths and raw provider responses are not stored in log output. Deactivating Regal Send preserves logs. Uninstall removes them only when the separate delete-data-on-uninstall option has been explicitly enabled.