How TempMail keeps your inbox safe: sanitization, sandboxing, and expiry

A temporary inbox is, by definition, a place that receives mail from people you didn't choose. That makes safe rendering more important than in a normal inbox, not less — so every message goes through the same pipeline before it's ever shown to you.

Sanitization on arrival

Every message's HTML is parsed and rewritten the moment it's received: scripts and event handlers are stripped outright, tracking pixels are detected and removed, and every remaining image is routed through a signed proxy rather than loaded directly from wherever the sender's server happens to be.

Sandboxed rendering

When you open a message, its HTML renders inside a sandboxed frame with no script execution — a second, independent layer of containment underneath the sanitization, so a bug in one layer alone still can't run code in your browser.

Expiry is the last line of defense

Every inbox has a countdown. When it ends, the address and everything sent to it are permanently deleted — not archived, not retained for analytics. The safest message is the one that no longer exists anywhere.