Privacy Policy

The short version

• Temporary inboxes are held in memory and are permanently deleted when they expire.
• You can use the core service without creating an account or telling us who you are.
• We do not sell personal data.
• The service is funded by Google AdSense, which uses cookies; you can control ad personalization through Google's own settings.
• Server access logs are kept for 14 days for security, then deleted.

Data we handle when you use a temporary inbox

• The generated address and its messages. These are stored in Redis, an in-memory database, with a time-to-live. When the timer lapses, the address and all messages — including attachments — are deleted and cannot be recovered. Expired temporary mail is never archived or backed up.
• A local copy of your active address. Your browser's local storage remembers your current temporary address so a page reload can restore the inbox. This stays on your device; clearing site data removes it.
• Web server logs. Like almost every website, our web server records request logs (IP address, user agent, URL, timestamp) for security monitoring and abuse prevention. Logs rotate daily and are deleted after 14 days.
• Rate-limit counters. To keep automated abuse in check, request counters keyed by IP address are held briefly in application memory and expire on their own.
• Aggregate statistics. We keep daily totals — how many addresses were generated and how many messages were received — with no link to any visitor. These numbers contain no personal data and are kept indefinitely.

We do not run third-party analytics trackers, and we do not build profiles of individual visitors.

Data we handle if you create an account

• Sign-in details. Your email address and a salted hash of your password (we never store the password itself), or — if you use Google sign-in — the email address Google shares with us.
• A durability check at registration. Because accounts exist to keep mail, the address you register with is checked against a disposable-address detection service; known throwaway addresses are declined.
• Your mailboxes and their mail. Permanent mailboxes, the messages in them, and any custom domains you connect are stored in our database until you delete them.
• Temporary-address history. When you extend or save a temporary address while signed in, we record the address and its expiry so your dashboard can show it.
• Administrative audit log. Actions taken by service administrators (for example, banning an account) are logged for accountability.

Cookies and local storage

• Essential session cookie. A signed cookie keeps you logged in and protects forms against forgery. It is required for the site to function.
• Preference storage. Local storage on your device remembers your active temporary address and interface state.
• Advertising cookies. Google AdSense sets third-party cookies and similar identifiers to serve and measure ads, which may include personalized ads depending on your region and consent choices. See how Google uses information from partner sites and manage preferences at Google Ads Settings . Where required by law, a consent prompt is shown before advertising cookies are used.

Advertising

TempMail Central is free because it shows ads through Google AdSense. Google acts as an independent controller of the data its advertising products process. We do not pass Google the contents of any inbox, and ad code runs on public pages — not inside your mail. We do not sell personal data to anyone.

How long data is kept

Who can see a temporary inbox

Temporary inboxes are not password-protected: while one is active, anyone who knows the exact address can open it. Addresses are drawn from roughly 3.6 quadrillion combinations and live for minutes, which makes guessing impractical — but you should still never direct sensitive information to a temporary address. Permanent mailboxes are different: they are tied to your account and visible only to you (and to us, to the extent required to operate and maintain the service).

Sharing with third parties

We do not sell, rent, or trade personal data. Data leaves our systems only in these cases: Google processes advertising data as described above and handles sign-in if you choose "Sign in with Google"; the address you register with is checked against a disposable-address detection service; and we may disclose information if a valid legal order requires it or to protect the service from abuse. There are no other recipients.

Deleting data and your rights

• Temporary inboxes delete themselves; you can also delete individual messages or generate a new address at any time.
• Signed-in users can delete individual mailboxes, all mailboxes, or the entire account from the dashboard settings; deletion is immediate and permanent.
• Depending on where you live, you may have legal rights to access, correct, export, or erase personal data we hold about you. Send requests through the contact page with the topic "Privacy or data request" and we will respond.

Children

The service is not directed to children under 13, and we do not knowingly collect personal data from them.

Changes and contact

If this policy changes materially, the date at the top will be updated and the new version published here. Questions about privacy can be sent through the contact form or to [email protected] .