Legal · Updated 15 October 2026
Privacy statement
Understand what we process, why we need it, and the limits of temporary email.
1. Public and private inboxes
Public inboxes are shared. Anyone who knows an address can read or delete its messages and download its attachments. Signing in does not make a public inbox private. Private inboxes require an eligible plan and are restricted to their account owner and authorized account credentials. Email is not end-to-end encrypted.
Avoid using temporary email for financial, medical, or other sensitive correspondence, or to recover an important account. A temporary address is not a guarantee of anonymity.
2. Information we process
To receive and display email, we process inbox addresses, sender and recipient details, subjects, message bodies, attachments, receipt times, and expiry dates. Developer OTP extraction also processes message content to identify possible verification codes and confidence indicators.
When you create an account, we store your email address, sign-in provider, account identifiers, creation date, saved inboxes, preferences, and subscription status. We also process custom-domain settings and API credentials when you use those features. We do not receive your Google or Apple password.
Network requests expose technical information such as IP addresses, browser details, request times, and error information. This information may be processed to operate the service, enforce limits, investigate faults, and prevent abuse.
3. Browser storage and cookies
We use session cookies to keep you signed in and browser storage to remember preferences, opened inboxes, and read state. Anonymous inbox shortcuts depend on that browser storage; clearing it can remove your saved list. Removing a shortcut does not delete the underlying inbox or messages. No analytics or session replay runs in the inbox reader.
4. How information is used and shared
We use information to deliver email, authenticate users, synchronize account settings, manage subscriptions, support API access, and protect the service. We do not sell account details or email contents.
Service providers process information needed for their roles: Google and Apple for supported sign-in methods, Resend for sign-in emails, Polar for website billing, RevenueCat and the app stores for mobile subscriptions, and hosting and backup providers for infrastructure. Their own privacy policies also apply to information they collect directly. Website and mobile subscriptions are separate.
Where advertising is displayed, ad providers may process device or browser information under their privacy notices and applicable consent choices. We may also disclose information when legally required or reasonably necessary to investigate abuse and protect users or the service.
5. Retention, expiry, and backups
Website message retention depends on the inbox creator’s plan: ten hours for anonymous use, 24 hours for registered free accounts, seven days for Pro, and 30 days for Developer. Mobile limits are shown in the app. Reading a message does not extend its expiry. Inbox availability also depends on plan limits, inactivity rules, and domain availability.
Expired content becomes unavailable and is removed through database expiry and scheduled file cleanup. Deleting an inbox or message affects everyone with access to it; a shared copy may remain until its own deletion or expiry. Downloads and copies held by recipients are outside our control.
Account, billing, domain, and recovery settings may outlast individual messages so we can maintain your account and restore service. Our metadata backup is designed to exclude email bodies and attachments. Deleted settings may remain in encrypted backups until those backups expire. Retention can also be extended where needed for legal obligations or abuse investigations.
6. Security and your choices
We use access controls and other safeguards to protect stored information, but no online service can guarantee complete security. Keep your account, devices, and API keys secure. You can delete messages and inboxes using the available controls and manage subscriptions through the relevant billing service.
Depending on where you live, you may have rights to access, correct, delete, or restrict the use of personal information. Contact the service operator through the support channel shown in your account or app for privacy requests. Do not include passwords, API keys, or message contents in an initial request.
7. Inbox access records
We retain a limited record of authorized inbox access for 180 days from observation. Each record identifies the inbox address and ID, the observed client IP and its source, the account or anonymous actor identifier, the website/API/mobile channel, and the first recorded operation and timestamp. An API key ID may be included; its secret is never recorded. We keep one observation per UTC calendar date, address, actor, IP, and channel. Repeated requests within that group are suppressed.
These records support security investigations and responses to valid legal requests. They do not include email bodies, attachments, subjects, verification codes, passwords, or session tokens. Access records are stored encrypted, restricted to authorized administrators, and expire automatically. We record administrator searches and exports with the operator and case reference. Information may be disclosed after an appropriate review of a valid legal request. An IP address does not establish a person's identity or prove that a message was read.
Access-record retention is separate from message expiry and account deletion. Database expiry makes records unavailable after 180 days; physical storage reclamation follows compaction. Downloaded reports are controlled by their authorized recipients.
8. Children and policy updates
The service is intended for adults aged 18 and over. If you believe a child has provided personal information, contact the service operator so it can be investigated. We will publish changes to this statement here and update the date above; material changes will be communicated through the service as appropriate.