Legal · Updated 20 October 2026
Privacy statement
Understand what we process, why we need it, and the limits of temporary email.
1. Public and private mailboxes
Public mailboxes are shared among users with saved access. Pro and Developer accounts may reopen a known public address. Existing watchers can read or delete its messages and download its attachments. Signing in does not make a public mailbox private. Private mailboxes require an eligible plan and are restricted to their account owner and authorized account credentials. Email is not end-to-end encrypted.
Avoid using temporary email for financial, medical, or other sensitive correspondence, or to recover an important account. A temporary address is not a guarantee of anonymity.
2. Information we process
To receive and display email, we process mailbox addresses, sender and recipient details, subjects, message bodies, attachments, receipt times, and expiry dates. Developer OTP extraction also processes message content to identify possible verification codes and confidence indicators.
When you create an account, we store your email address, sign-in provider, account identifiers, creation date, saved mailboxes, preferences, and subscription status. We also process custom-domain settings and API credentials when you use those features. We do not receive your Google or Apple password.
Network requests expose technical information such as IP addresses, browser details, request times, and error information. This information may be processed to operate the service, enforce limits, investigate faults, and prevent abuse.
3. Browser storage and cookies
We use session cookies to keep you signed in and browser storage to remember preferences, opened mailboxes, and read state. Anonymous mailbox shortcuts depend on that browser storage; clearing it can remove your saved list. Removing a shortcut does not delete the underlying mailbox or messages. We use Simple Analytics to count visits to public site pages. It receives page paths and traffic-source parameters, but no mailbox contents or message details. Sign-in, account, admin, and verification pages are excluded. We do not run session replay.
4. How information is used and shared
We use information to deliver email, authenticate users, synchronize account settings, manage subscriptions, support API access, and protect the service. We do not sell account details or email contents.
Service providers process information needed for their roles: Google and Apple for supported sign-in methods, Resend for sign-in emails, Polar for website billing, RevenueCat and the app stores for mobile subscriptions, Simple Analytics for public-page visit measurement, and hosting and backup providers for infrastructure. Their own privacy policies also apply to information they collect directly. Website and mobile subscriptions are separate.
Where advertising is displayed, ad providers may process device or browser information under their privacy notices and applicable consent choices. We may also disclose information when legally required or reasonably necessary to investigate abuse and protect users or the service.
5. Retention, expiry, and backups
Public messages are retained for 7 days on Free and 14 days on Plus; other paid plans follow their plan retention. Private messages follow the paid plan. These deadlines start when a message is received; reading it does not extend its expiry. Mailbox records remain saved until explicitly removed. Receiving can pause after inactivity and resumes on a foreground visit, subject to domain availability and private-plan eligibility.
Expired content becomes unavailable and is removed through database expiry and scheduled file cleanup. Deleting a shared public message affects other watchers; removing a public collection entry leaves the mailbox and its messages intact. Deleting a private mailbox removes its retained mail; a shared copy may remain until its own deletion or expiry. Downloads and copies held by recipients are outside our control.
Account, billing, domain, and recovery settings may outlast individual messages so we can maintain your account and restore service. Our metadata backup is designed to exclude email bodies and attachments. Deleted settings may remain in encrypted backups until those backups expire. Retention can also be extended where needed for legal obligations or abuse investigations.
6. Security and your choices
We use access controls and other safeguards to protect stored information, but no online service can guarantee complete security. Keep your account, devices, and API keys secure. You can delete messages and mailboxes using the available controls and manage subscriptions through the relevant billing service.
Depending on where you live, you may have rights to access, correct, delete, or restrict the use of personal information. Contact the service operator through the support channel shown in your account or app for privacy requests. Do not include passwords, API keys, or message contents in an initial request.
7. Mailbox access records
We retain a limited record of authorized mailbox access for 180 days from observation. Each record identifies the mailbox address and ID, the observed client IP and its source, the account or anonymous actor identifier, the website/API/mobile channel, and the first recorded operation and timestamp. An API key ID may be included; its secret is never recorded. We keep one observation per UTC calendar date, address, actor, IP, and channel. Repeated requests within that group are suppressed.
These records support security investigations and responses to valid legal requests. They do not include email bodies, attachments, subjects, verification codes, passwords, or session tokens. Access records are stored encrypted, restricted to authorized administrators, and expire automatically. We record administrator searches and exports with the operator and case reference. Information may be disclosed after an appropriate review of a valid legal request. An IP address does not establish a person's identity or prove that a message was read.
Access-record retention is separate from message expiry and account deletion. Database expiry makes records unavailable after 180 days; physical storage reclamation follows compaction. Downloaded reports are controlled by their authorized recipients.
8. Children and policy updates
The service is intended for adults aged 18 and over. If you believe a child has provided personal information, contact the service operator so it can be investigated. We will publish changes to this statement here and update the date above; material changes will be communicated through the service as appropriate.