[Data Privacy Concern] Does `type: files` have any cleanup fallback if email sending fails?

[waldemar-p]

Bug description

When a form uses the files fieldtype, my understanding is: file gets uploaded, attached to the email, then deleted. But I'm wondering what happens when the email step fails for whatever reason (SMTP error, network blip, server restart at the wrong moment, a neutrino hitting and moving one bit, etc.).

Is there a fallback that still triggers cleanup, or is deletion purely conditional on a successful email send? If it's the latter, it seems like files could end up sitting on the server indefinitely with no way to discover or clean them up. That would be a bug. If not, please document that behavior.

Asking because for sites handling personal data (CV uploads, ID documents, medical forms) that is a data privacy concern.

If this is already handled somewhere I'm not seeing, happy to be corrected. If not, would a scheduled cleanup command or at least some docs around the failure behavior be a possibility?

How to reproduce

It's more of a potential bug, but I didn't restart the server at just the right time.

I didn't know where to put that question else.

Logs

Environment

Not relevant for this assumption.

Installation

Fresh statamic/statamic site via CLI

Additional details

No response

[jasonvarga]

Yup, file uploads eventually get garbage collected.

https://github.com/statamic/cms/blob/6.x/src/Http/Middleware/DeleteTemporaryFileUploads.php

On every control panel request, there's a 1:50 chance it'll delete all file remaining file uploads over an hour old.

So yes they will eventually get deleted if the control panel is being used.