Legal & Data Safety

Privacy Policy

Last Updated: October 2026 • Compliant with Google Play Data Safety & GDPR Standards

1. Introduction & Core Philosophy

Welcome to Temp Mail. We are committed to protecting your personal privacy. Our service is intentionally built on a privacy-by-design architecture: we do not require user accounts with passwords, real names, telephone numbers, or payment methods. Every session is designed to be disposable, ephemeral, and anonymous.

2. What Information We Process

To provide disposable email routing and real-time alerts, we process the minimum data strictly required for the service to function:

  • Temporary Disposable Email Handles: Randomly generated or custom email addresses created on our domains (e.g. abc123@domain.com).
  • Inbound Email Messages: Message subjects, sender addresses, textual bodies, and attachments routed to your temporary addresses.
  • Anonymous Device Identifier (UUID): An anonymized string generated when the application is installed on your device to maintain your active list of temporary mailboxes without requiring a username or password.
  • Push Notification Token: A Firebase Cloud Messaging (FCM) device token used solely to notify your device when a new incoming email arrives.

3. Data Retention & Auto-Expiration

By default, temporary mailboxes and incoming messages are ephemeral:

  • Inactive temporary mailboxes and their messages expire automatically in accordance with system retention settings (typically 24 hours to 7 days).
  • Once expired or deleted, messages are permanently purged from database records and edge storage.
  • We do not retain permanent archive copies, telemetry backups, or logs containing message contents.

4. User Rights: Account & Data Deletion

You have the absolute right to permanently delete your data at any time:

Within the Mobile App

Open Settings → Storage & Local Cache and tap Reset Session. This immediately destroys your anonymous identity on your device and generates a brand-new blank state.

Via Public Web Request

Even if you uninstalled the mobile app, you can request full erasure using our web portals: Account Deletion Form or Data Deletion Form.

5. Third-Party Services & Infrastructure

Our infrastructure is powered by trusted enterprise edge providers:

  • Cloudflare: Edge routing, serverless execution, and encrypted distributed storage (D1 / KV).
  • Google Firebase: Firebase Cloud Messaging (FCM) for low-latency push notifications and Crashlytics for anonymous crash telemetry.

6. Contact & Privacy Officer

If you have any questions regarding this Privacy Policy or wish to inquire about data protection, please submit a request via our Data Deletion & Privacy Portal.