Privacy policy
Last updated July 26, 2026
This page explains what TempMail collects, why, and for how long — in plain language, matching what the product actually does.
What we collect
Using TempMail as a guest requires no personal information: no name, no phone number, no real email address. A guest inbox is authorized by a private credential stored in your browser, not by anything that identifies you. If you create an optional account, we collect the email and password (or third-party sign-in identity) you provide, and a display name if you set one.
Message content
Messages sent to a TempMail address are stored only for as long as the inbox is active. Incoming mail is checked with standard email authentication, and message content is filtered to remove scripts, tracking elements, and other unsafe material before it can be displayed. When an inbox expires, its messages and attachments are permanently deleted — not archived, and not retained for analytics.
Cookies and local storage
We use secure browser cookies to authorize guest inbox access and to keep you signed in if you have an account. Your browser may also store a small amount of local data so we can reopen the inbox you were using on a later visit. Optional analytics cookies may be set on the live website only — see our cookie policy for details and an opt-out control.
Third parties
We use service providers to operate TempMail. The categories of recipients who may process personal data on our behalf include: cloud hosting and infrastructure providers; database and authentication providers; network security and email-routing providers; analytics providers; and payment and billing providers. Payment processing for paid plans is handled by Stripe; we never see or store your full card details. On the live website we may use Google Analytics to measure aggregated traffic and product usage (for example page views and whether someone created an inbox). We configure analytics so temporary email addresses, message subjects or bodies, passwords, sign-in codes, and account identifiers are not sent as analytics event data. Advertising and ad personalization signals are disabled. You can opt out on the cookie policy page.
Data retention
Guest inboxes and their messages are deleted permanently when they expire — typically within hours, never more than a few days. Account data is kept only for as long as your account exists. Billing records required by tax and accounting law are retained for the period required by applicable law even after account deletion.
Your rights, including under GDPR
If you're in the UK, EEA, or a jurisdiction with similar protections, you have the right to: access the personal data we hold about you; correct it if it's inaccurate; request erasure; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time where processing is based on consent (such as optional analytics). For an account, export and deletion are self-service and instant from account settings — no request or waiting period needed. For anything else, or if you don't have an account, email [email protected] and we'll respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority. Our legal basis for processing is performance of a contract (running the service you asked for) and, for optional analytics, your consent.
International transfers
Our service providers — including cloud hosting and infrastructure providers, database and authentication providers, network security and email-routing providers, analytics providers, and payment and billing providers such as Stripe — may process data in the United States and other countries. Where required, transfers rely on those providers' standard contractual clauses or equivalent safeguards.