Privacy

What we store

• Mail sent to your inbox: sender, subject, body and attachments, plus the codes and links we extract from them. Dangerous file types (executables, scripts, disk images, macro-enabled documents, HTML and SVG) and files over 10 MB are not stored; we keep only their name, type and size.
• Inbox records: the address, when it was created and when it expires. For browser inboxes we also keep a keyed hash of your IP address (never the IP itself) to enforce the 3-per-day limit.
• Accounts (developers only): email address, a hashed password and hashed API keys.
• Connected apps: when you approve an AI client over OAuth, we store its name, redirect address, the scopes you granted and hashed tokens. Revoke it from the dashboard at any time.
• Operational logs: IP address and request metadata, used for rate limiting and abuse prevention.

How long

Inboxes, the IP hash and all mail are deleted automatically 24 hours after the inbox expires. You can delete messages or whole inboxes earlier at any time.

What we never do

• Sell or share the content of your mail.
• Load remote images in emails unless you click “Load images” (this blocks tracking pixels).
• Send or forward mail from your inbox. Inboxes are receive-only. The only mail we send is a password reset link you request for your own account.

Analytics and cookies

We use Google Analytics, with advertising features disabled, to see which pages are used. It never sees the content of your mail. If you appear to be in the EU, EEA, UK or Switzerland (we guess from your browser’s time zone, and ask whenever we can’t tell), nothing from Google loads until you click Accept on the cookie banner. Elsewhere, analytics is on by default. Everywhere, if your browser sends Do Not Track we treat it as a refusal. Change your choice at any time with Cookie settings at the bottom of every page; turning analytics off removes its cookies.

Everything else we keep in your browser is needed for the site to work and is never shared: your inbox session, your sign-in session (developers), your light or dark theme, and your cookie choice.

Contact

Questions or deletion requests: contact us.