Privacy Policy
Last updated
TempMailCode is built to keep as little about you as possible. You don't create an account, we don't ask for your name or real email address, and we don't track you.
What we store
Emails sent to your temporary address
- We store the sender, subject, text and sanitized HTML of each message, and any verification code we find in it, so you can read it in your inbox.
- Messages are kept in server memory only, never written to disk, and are deleted automatically 60 minutes after they arrive. Deleting your inbox removes them immediately. A server restart also erases them.
- We don't store attachments, only their file name, type and size.
IP addresses
- To stop abuse, we limit how many requests each IP address can make. The limiter keeps your IP address in memory for about one minute and then forgets it. We don't log IP addresses or link them to an inbox.
Server logs
- When a message arrives, the server writes one log line with the recipient address, sender, subject and detected code. We use these logs only to fix problems and investigate abuse, and they are removed as the system rotates its logs.
In your browser
- Your browser's local storage remembers your current address, which messages you've already seen, and your light or dark theme. This data stays on your device; clear it any time with the Delete button or your browser settings.
- We don't set cookies for visitors.
What we don't do
- No analytics, tracking pixels, advertising networks or third-party scripts. Our fonts are hosted on our own server.
- No selling, renting or sharing of your data with anyone.
- No loading of remote images inside emails. We block them, because loading them would tell the sender your address is active.
- No sending of email. TempMailCode only receives.
Who can see your messages
Your temporary address is unlisted, not private. There's no password, so anyone who knows or guesses the exact address can read the mail sent to it. Don't use TempMailCode for banking, health, work or any account you'd mind losing.
Developer API
If you use our developer API, we store a secure hash of your API key (never the key itself), its label, and the addresses created with it, which expire automatically.
Legal requests
We may disclose information we hold if the law requires it. Because messages are deleted within 60 minutes and we keep no accounts, there is usually very little to disclose.
Changes to this policy
If we change how we handle data, we'll update this page and the date at the top. Using TempMailCode after a change means you accept the updated policy.
Contact
Questions about this page? Email hello@tempmailcode.com or visit our contact page.
See also our Terms of Use.