Privacy Policy

TempMail (temporaryemail.cc) provides free, disposable email addresses for receiving mail. You do not need an account to use the core service, and we ask for as little information as possible. This policy explains what we collect, how long we keep it, and who else is involved. For a walkthrough of the technical protections, see our Security page.

Information you provide

To receive mail you provide nothing about yourself — no name, no real email, no password. You do give us the messages that other people or services send to your temporary address, because we have to store them briefly so your browser can display them.

If you use the optional features, you provide a little more: signing in stores your email address (used for a magic sign-in link and, in the future, Premium), and the contact form collects whatever you type into it plus a reCAPTCHA response.

What we store for temporary inboxes

When you generate an address we store the address itself, a secret access token that only your browser holds, and any messages delivered to it. For each message we keep the sender, subject, body (text and sanitized HTML), a short preview, any one-time code we detect, timestamps, and a flag noting whether the message had an attachment.

We do not store attachment files themselves — only the flag that a message contained one. Incoming HTML is cleaned server-side (with HTMLPurifier) before it is stored, and it is displayed inside a sandboxed frame so it cannot run scripts on your device.

How long we keep it

A temporary inbox expires after 24 hours of inactivity and stops receiving new mail; using it (opening the page and reading messages) extends that window. When you delete an address, generate a new one, or a 10-minute inbox reaches the end of its countdown, that address and its messages are removed from our servers.

We want to be precise rather than make a promise we don't keep: an inbox that simply expires because you stopped using it is blocked from receiving mail, but its stored data may remain on our servers until it is deleted. If you want an address and its messages gone immediately, use the Delete button — don't just walk away. Because disposable inboxes are meant to be shared with untrusted sites, please never use one for anything sensitive.

IP addresses and logs

We do not attach your IP address to your inboxes or messages. Your IP is used transiently to enforce rate limits (so no one can flood the service) and is not stored against your inbox. The one place we do retain an IP is with a contact-form submission, so we can respond to and act on abuse or support requests. Our servers and our infrastructure providers keep standard technical logs for security and reliability.

Cookies, analytics and advertising

We use Google Analytics to understand aggregate traffic — which pages are visited, roughly where visitors come from, and how the site performs. This uses cookies and similar identifiers.

This site also shows ads through Google AdSense. Google and its partners use cookies to serve and measure ads, and may show personalized advertising based on your prior visits to this and other sites. You can control ad personalization at Google Ad Settings and learn more at Google's advertising policy. Depending on where you live, you can opt out of some third-party ad cookies via aboutads.info or youronlinechoices.eu.

Third-party services

We rely on a small set of providers, each receiving only what it needs to do its job:

• Cloudflare — routes inbound email to your temporary inbox and sits in front of the site.
• Resend — delivers the magic sign-in link when you choose to sign in.
• Google— optional "Sign in with Google", plus Google Analytics and Google AdSense as described above.
• Google reCAPTCHA — protects the contact form from spam and bots.
• Stripe — will process payments if and when Premium launches. We never see or store full card details.

How your data is protected

Traffic to the site is served over HTTPS, so data is encrypted in transit. Each inbox is guarded by a secret token, so only the browser that created an address can read its mail. Incoming email is sanitized before storage and rendered in isolation. See the Security page for the full picture.

Your choices and rights

You can delete any address and its messages at any time with the Delete button. If you created an optional account, you can request its deletion by contacting us. Depending on your location you may have rights to access, correct, or delete personal data we hold; we'll act on legitimate requests sent through the contact form.

Children

TempMail is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their information.

Who operates this site

temporaryemail.cc is an independent service operated by its owner. For any privacy or data request you can email us directly at privacy@temporaryemail.cc or use the contact page.

Changes to this policy

If we change how we handle data, we'll update this page and the "last updated" date above. Questions about privacy? Email privacy@temporaryemail.cc or reach us through the contact page.