Privacy Policy

Our terms of privacy, clearly.

No legalese. A plain-language explanation of what we collect, how we use it, and your rights.

Effective: January 1, 2026  ·  Last reviewed: March 1, 2026

Data We Collect

TempMail is designed to operate without collecting personally identifiable information. When you use the Service, the only data that temporarily exists on our servers is your randomly generated email address and any messages delivered to it. We require no account, no name, no real email address.

A lightweight session cookie is stored in your browser to associate your session with your generated address. This cookie contains no personal information and is destroyed when you close your browser.

How We Use It

The temporary address and message data on our servers exists for one purpose only: to deliver emails to your disposable address and display them in your browser. We do not parse email content for advertising, share it with third parties, or use it to build any kind of profile about you.

Retention

All data associated with a disposable address is permanently and irreversibly deleted when the address expires. Free addresses expire after 60 minutes. Premium addresses can be configured from 10 minutes to 30 days. Deletion is final — there is no archival, backup, or legal hold mechanism.

Data Sharing

We share no data with third parties. We do not use cloud storage providers for email content, do not integrate third-party analytics, and do not have any data-sharing agreements with any party. Our infrastructure runs entirely on servers we own and operate.

Because we retain no logs and store no identifying information, we have nothing meaningful to produce in response to subpoenas or warrants. See our Warrant Canary for the current status.

Security

We use TLS 1.3 for all data in transit and AES-256-GCM for data at rest. Encryption keys are stored in hardware security modules and rotated every 24 hours. Our security posture is independently audited annually. See our Encryption Stack page for full technical details.

Your Rights

Because we collect no personal data, most traditional data subject rights (access, portability, rectification) are moot — there is no personal data file to access or correct. You have the right to delete your address and all associated messages at any time by closing your session or clicking "Regenerate".

If you believe personal data about you exists on our systems and wish to exercise your rights under GDPR or applicable law, contact our Data Protection Officer at the address below.

Contact Our DPO

Our Data Protection Officer is reachable at support@vcnclgatd.site. For general privacy questions, use support@vcnclgatd.site. Postal address: TempMail Privacy Systems, Reykjavik, Iceland.