Introduction
Mail-Temp ("we," "our," or "us") operates the mail-temp.org website and temporary email service. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our service.
We are committed to protecting your privacy. Our temporary email service is designed specifically to help you protect your personal email address from unwanted communications. We believe privacy is a fundamental right, and we've built our service with privacy as a core principle.
By using Mail-Temp, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our service.
Information We Collect
We collect minimal information necessary to provide our service. Here's a detailed breakdown:
1. Email Data:
- Temporary email addresses generated for you
- Emails received at your temporary address (including sender, subject, body, and attachments)
- Timestamps of when emails are received
- All email data is automatically and permanently deleted after 24 hours
2. Technical Data:
- IP addresses (used for rate limiting and abuse prevention only)
- Browser type, version, and language preferences
- Operating system information
- Device type (desktop, mobile, tablet)
- Screen resolution and viewport size
3. Usage Data:
- Pages visited and time spent on each page
- Referring website or source
- Click patterns and user interactions
- Error logs and performance metrics
4. Analytics Data:
We use the following third-party analytics services to understand how visitors use our site:
- Google Analytics: Collects anonymized data about site usage, traffic sources, and user behavior. Google's Privacy Policy
- Microsoft Clarity: Provides heatmaps and session recordings to help us improve user experience. All data is anonymized. Microsoft's Privacy Policy
How We Use Your Information
We use the information we collect for the following purposes:
- Service Provision: To provide and maintain the temporary email service
- Abuse Prevention: To prevent abuse, enforce rate limits, and protect our infrastructure
- Service Improvement: To analyze usage patterns and improve user experience
- Security: To detect and prevent security threats, fraud, and malicious activity
- Technical Support: To diagnose and fix technical issues
- Legal Compliance: To comply with legal obligations when required
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for collecting and using your information depends on the data concerned and the context:
- Consent: Where you have given us consent for analytics and advertising cookies
- Legitimate Interests: To provide our service, prevent abuse, and improve user experience
- Legal Obligation: When we need to comply with a legal requirement
- Contract Performance: To provide you with the service you requested
Data Retention
We retain data only as long as necessary for its intended purpose:
- Emails: Automatically and permanently deleted after 24 hours
- Temporary addresses: Removed when associated emails expire
- Server logs: Retained for up to 30 days for security and debugging purposes
- Analytics data: Retained according to third-party provider policies (typically 26 months for Google Analytics)
- Rate limiting data: IP-based rate limits reset every 24 hours
Cookies and Tracking Technologies
We use cookies and similar technologies for the following purposes:
- Essential: Remembering your generated email address (localStorage)
- Preference: Storing your consent choices
- Analytics: Understanding how visitors use our site (with consent)
- Advertising: Displaying relevant advertisements (with consent)
You can control cookies through your browser settings or our consent banner. Disabling essential cookies may affect service functionality. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.
Data Security
We implement industry-standard security measures to protect your data:
- Encryption: HTTPS/TLS encryption for all connections
- Automatic Deletion: All email data is permanently deleted after 24 hours
- Rate Limiting: Protects against abuse and denial-of-service attacks
- Input Sanitization: Prevents cross-site scripting (XSS) and injection attacks
- Access Controls: Restricted server access with secure authentication
- Regular Updates: Server software is kept up to date with security patches
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Third-Party Services
Our service integrates with the following third-party services. Each has its own privacy policy:
- Google Analytics - Website analytics and traffic analysis
- Microsoft Clarity - User behavior analytics and session recordings
- Google AdSense - Advertising (may use cookies for personalized ads based on your consent)
- QR Server API - QR code generation for email address sharing
We do not sell your personal information to third parties.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights:
- Right of Access: Request a copy of the data we hold about you
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (our 24-hour auto-deletion policy means most data is already deleted)
- Right to Restrict Processing: Request limitation of data processing
- Right to Data Portability: Request your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for analytics and advertising at any time
To exercise these rights, please contact us. Note that our 24-hour deletion policy means we may not have data to provide or delete.
Your Rights Under CCPA (California Residents)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to Know: Request disclosure of personal information collected, used, and disclosed
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.
Children's Privacy
Our service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
Do Not Track Signals
Some browsers include a "Do Not Track" (DNT) feature. We honor DNT signals when detected, and will not track your activity across other websites if you have DNT enabled.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.
For significant changes, we may provide additional notice such as a banner on our website.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
We aim to respond to all requests within 30 days.