Privacy Policy

TryTempInbox is designed around data minimization by default. Because there are no user accounts, there is no registration form — and therefore no personal profile to store, leak, or misuse. Specifically, using TryTempInbox never requires you to provide:

• Your name, date of birth, postal address, or any other identity document;
• Your real (personal) email address or a phone number;
• A password, passphrase, or any other authentication credential;
• Payment card or billing details — the service carries no paid tier;
• Contacts, calendars, location history, or access to other data on your device.

Your temporary address is assembled from cryptographically secure random values generated at the moment you open the site. It is not derived from — and cannot be traced back to — anything that identifies you.

Delivering a working inbox requires handling a small amount of transient data. We limit this to the absolute minimum needed to route and display your mail:

• Temporary email addresses. The random address shown to you is held by our mail-routing infrastructure only for as long as it remains active, so that incoming messages know where to land.
• Incoming messages. Emails sent to your temporary address are stored briefly so your browser can fetch and display them. Every message is automatically and permanently deleted after a few hours — see Section 7.
• A session token. A random token links your browser tab to your inbox. It lives in your browser's local storage, is never transmitted to third parties, and becomes useless once the underlying address expires.

TryTempInbox is strictly receive-only. Because outbound sending is disabled, we never process contact lists, drafts, or anything you might otherwise write.

First-party: TryTempInbox itself does not set tracking cookies. We use your browser's local storage for a single functional purpose — remembering your session token so a page refresh doesn't orphan your inbox. This data stays on your device, is invisible to ad networks, and can be wiped at any time by clearing your browser's site data.

Third-party: our advertising partners, including Google, may set or read cookies when ads are shown. That activity is governed by Section 6 below, where you'll also find instructions for opting out.

Like virtually every service on the internet, our edge infrastructure produces short-lived technical logs when your browser requests a page or an inbox update. These logs may include an IP address, browser and device type, referring page, and timestamps. We use them exclusively for security monitoring, rate limiting, and diagnosing abuse of the service — never to build advertising profiles. Routine logs are rotated and erased on a short cycle (no longer than 30 days), and we do not correlate them with the contents of any inbox.

To understand aggregate traffic patterns (for example, which pages load slowly), we may use privacy-focused measurement such as Cloudflare Web Analytics, which is designed to work without cookies and without collecting personal identifiers. We deliberately avoid analytics tools that fingerprint individual visitors. The numbers we look at answer questions like "how many inboxes were created today?" — never "what did a specific person do?"

Ephemerality isn't a feature we bolted on — it's the architecture. The retention schedule is deliberately aggressive:

• Messages are automatically and permanently deleted a few hours after they arrive, whether or not you ever open them.
• Temporary addresses expire with your session; once expired, the address stops accepting mail and its routing record is purged.
• Messages you delete manually are removed immediately rather than being moved to a "trash" folder.
• Technical logs rotate out within 30 days at most, as described in Section 4.

Because deletion is automatic and irreversible, we cannot recover a message or reactivate an address after expiry — even if you ask us nicely, and even under a legal request. What is gone is gone.

The small amount of data the service touches is shielded in transit by HTTPS/TLS encryption and served behind a strict Content Security Policy. Message bodies are sanitized before rendering to strip scripts and trackers embedded by senders, and our receive-only design removes entire categories of attack surface. Random addresses are generated with cryptographically secure randomness, making inboxes practically unguessable.

No system is perfectly secure, and a temporary inbox should never be treated as a vault. Do not use TryTempInbox for banking, government services, password resets for important accounts, or any correspondence you may need later — by design, we cannot get it back for you.

We do not sell, rent, trade, or otherwise monetize user data — and since we collect almost none, there is essentially nothing to share. The limited circumstances in which data moves at all:

• Infrastructure providers. Our hosting and edge-network providers (such as Cloudflare) process traffic technically necessary to deliver the site and route email, under their own strict data-processing terms.
• Advertising vendors. As detailed in Section 6, ad networks receive standard ad-request data from your browser (e.g., cookie identifiers), never inbox content.
• Legal obligations. If compelled by a valid legal process, we can only hand over what exists at that moment — typically nothing beyond short-lived logs, given our deletion schedule.

Privacy regulations such as the GDPR and CCPA grant rights of access, correction, deletion, and portability. TryTempInbox satisfies most of these by construction: there is no account to export, correct, or close. You can exercise complete control at any time:

• Delete everything by closing the tab and clearing your browser's site data — your session token vanishes and your address dies with the session.
• Refuse advertising cookies via the opt-out links in Section 6 or your browser's cookie controls.
• Ask us anything about remaining data via the contact address in Section 14. Because inboxes are anonymous and unverifiable, we may be unable to associate a request with a specific inbox — which is precisely the point of the service.

TryTempInbox is not directed at children under 13 (or under 16 where local law requires a higher age), and we do not knowingly collect personal information from children. Given that the service collects no identifying information from anyone, there is no mechanism by which a child's data could be singled out — but if you believe a child has somehow provided us personal information, contact us and we will address it promptly.

Our infrastructure runs on a globally distributed edge network, so the transient data described above may be processed in whichever data center is closest to you. Regardless of location, the same rules apply everywhere: minimal collection, short retention, automatic deletion.

If we revise this Privacy Policy, the updated version will be posted on this page with a new "Last updated" date. Material changes will be flagged prominently on the site before they take effect. Continued use of TryTempInbox after an update constitutes acceptance of the revised policy.

Questions, concerns, or requests about this Privacy Policy can be sent to privacy@trytempinbox.com. We aim to respond within a reasonable timeframe.