Your data. Your choices.
Last drafted November 2026. This draft must be checked against the final hosting provider, payment processor, retention setup and applicable privacy laws before public launch.
Data processed
The service stores account email addresses, securely hashed passwords, subscription state, temporary mailbox addresses, sender details, subject lines and plain-text email content received by active mailboxes. Server logs may contain connection information such as IP addresses. Payment providers process payment details; the app stores only subscription identifiers and state, not full card numbers.
Temporary messages and retention
Temporary addresses stop accepting messages after their stated expiry. Messages and mailbox records may remain for restoration, normally up to 30 days after expiry, then are deleted by scheduled cleanup. If the cleanup process is interrupted, deletion may be delayed. Backups may have separate retention periods that must be finalized before launch.
Gmail aliases
If the service operator enables Gmail aliases, emails are read from an explicitly authorized Gmail source. Only messages associated with an active generated alias are made visible in the relevant temporary inbox. Do not use the service for personal, financial or confidential communications.
Advertising and optional cookies
The public informational homepage and email-privacy guides use Google AdSense, publisher ID ca-pub-5408806958679903, to serve advertising. Google and its partners may use cookies, browser storage, IP addresses and other signals to show ads, measure delivery and address fraud, depending on consent choices and applicable law. Email inbox pages and private messages do not load AdSense scripts. You can learn about Google's data practices in its Partner sites information and manage Google advertising preferences through My Ad Center. Where required, a consent-management platform must be configured before personalized advertising is offered. This notice is a draft requiring legal review.
Cookies and sharing
Essential signed cookies identify your guest session or signed-in account. Anyone holding your temporary inbox share link can view that inbox until the link is revoked or the inbox expires. Treat sharing links like passwords.
Your rights
Account export, deletion and a formal privacy contact process must be configured before public launch. The operator must complete this notice with legal entity details, contact information, subprocessors and country-specific rights.