TempMail

Privacy Policy

Last updated: July 2, 2026

TempMail ("we", "us") provides disposable email inboxes at tempymailbox.com. This policy explains what we collect, why, and what happens to it. The short version: we collect as little as possible, and most of it deletes itself.

What we collect

  • Temporary inbox data. Messages sent to a disposable address, including sender, subject and body. Messages are deleted automatically after 7 days; unclaimed mailboxes are deleted after 15 days together with all of their messages.
  • Account data (optional). If you create an account: your email address, a hashed password (bcrypt) and your display name. Accounts are never required to use the core service.
  • Payment data. Payments are processed by Stripe. We never see or store your card number — only your Stripe customer reference and subscription status.
  • Technical data. IP addresses are used transiently for rate limiting and abuse prevention.

What we don't do

  • We don't sell or rent your personal data to anyone.
  • We don't read your temporary emails.
  • We don't use cross-site tracking to build advertising profiles ourselves.

Advertising

We may display ads to keep TempMail free. When ads are enabled, third-party vendors — including Google (AdSense) — may use cookies and similar technologies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising by visiting Google Ads Settings (adssettings.google.com) and review how Google uses data at google.com/policies/technologies/partner-sites. In regions that require it (EEA/UK), ad and analytics cookies are only set after you consent via our cookie banner.

How long we keep data

  • Messages in a temporary inbox: 7 days, then deleted permanently.
  • Unclaimed mailboxes: 15 days, then deleted with all messages.
  • Claimed mailboxes and accounts: until you delete them or close your account.

Third-party services

We rely on a small set of processors to run the service: MongoDB Atlas (database hosting), Stripe (payments), Brevo (transactional email for the contact form) and Cloudflare (bot protection). Each receives only the data required for its function.

Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export or delete your personal data. Email us at [email protected] and we'll act on your request within 30 days.

Contact

Privacy questions? Reach us at [email protected] or via the contact form.