This policy explains what information this temporary email service processes, why, and for how long. We designed the service to work without accounts and to keep as little data as possible for as short a time as possible.
1. Temporary inboxes and messages
When you open the service we create a random email address and a random access key. The key is stored in a cookie in your browser; we store only a one-way hash of it. Messages delivered to your address — sender, subject, body and permitted attachments — are stored encrypted and are deleted automatically when the inbox expires or when you delete them earlier. Unknown or expired addresses are rejected and their messages are not stored.
Our administrators do not browse message content. Operational tools show only metadata such as message counts, sizes, sender domains and delivery status, which we use to keep the service working and to fight abuse. This metadata is removed on short, fixed schedules (typically within 14 days).
2. Cookies and local storage
- Inbox access cookie — keeps you connected to your temporary inbox. Strictly necessary; expires with the inbox.
- Security cookie — a random identifier used to protect forms against cross-site request forgery. Strictly necessary.
- Preferences — your theme, language and consent choice are kept in your browser's local storage.
We do not use our own cookies for advertising or cross-site tracking.
3. Security and abuse prevention
To prevent abuse we apply rate limits. Rate-limit counters use a keyed, irreversible hash of your IP address. When a security event occurs (for example repeated failed requests), the IP address may be logged for up to 90 days so that we can block attacks. Cloudflare, our network provider, also processes connection data to protect the site.
4. Visitor statistics
We count page views with our own privacy-friendly analytics. We do not store IP addresses for this purpose and we do not set analytics cookies. Unique visitors are estimated with a hash that changes every day, so visits cannot be linked across days. We record the page, language, device type, browser family, referring website and, where available, the country. Raw statistics are kept for up to 90 days and then only aggregated totals remain. Inbox and message pages are never included.
5. Advertising
Public informational pages may display ads served by Google AdSense. Google and its partners may use cookies or similar technologies to show ads based on your visits to this and other websites. You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites and manage personalised ads at adssettings.google.com. Where required, a consent message lets you accept or refuse personalised advertising. Ads are never shown inside your inbox or messages, and message content is never shared with advertisers.
6. Contact form
If you write to us, we keep your name, email address and message so that we can reply. These messages are deleted once they are no longer needed.
7. Your choices and rights
You can delete your inbox at any time with the Delete button, clear cookies in your browser, refuse personalised advertising, or contact us with questions about your data. Because inboxes are anonymous and short-lived, we usually cannot identify data belonging to a specific person after an inbox has expired.
8. Children
The service is not directed to children under 13 (or the minimum age required in your country).
9. Changes
We may update this policy as the service evolves. The date of the latest update is shown at the top of this page.