Privacy Policy

·

Plain description of what this site does with information. If something here does not suit you, the honest advice is not to use the service — there is no setting that changes any of it.

Start here: an inbox is a public place

Addresses on this site have no password and never had one. Whoever types the address sees the mail — you, and equally anyone who guesses the same address. That is not a gap we forgot to close; it is the mechanism that lets the service work with no sign-up at all.

Practical consequence: an address here is fine for a sign-up confirmation, a download link or a code you will use once. It is not a place for documents, invoices, password resets to accounts you care about, or anything you would mind a stranger opening.

If you point your own domain at us

The MX setup described in add new domain name changes whose domain the mail arrives on. It does not change anything on this page. Messages for any address on your domain land on our servers, are kept for the same period as everything else here, and are readable by whoever knows the address — including addresses you never handed out, if someone guesses them.

A domain of your own protects you from block-lists, not from being read.

What is kept, and for how long

What stays in your own browser

The list of inboxes you have opened is written to your browser's local storage. It is never sent to us — we do not have it and cannot produce it. Clearing site data in your browser erases the list completely.

Cookies this site sets

These are all the cookies the site itself sets. Google adds its own on top of them; those are listed in the next section.

None of them identifies a person. They exist so the site remembers what you chose a minute ago.

Cookies Google sets

Visitor statistics run on Google Analytics, which sets its own cookies with names beginning _ga. If advertising is switched on, Google's ad system adds further ones of its own.

We do not control those names and do not promise the list stays current — it is Google's, and it changes when they change it. What we can say is where the rules live: how Google uses data from sites that use its services.

What we do not do

Security, honestly stated

Traffic runs over HTTPS and incoming mail is cleaned of active content before it is shown. Neither of those makes an inbox private: the address itself is the only key, and it is a key anyone can copy or guess.

Abuse

Using the service to break the law or to hurt other people is not permitted. That covers fraud, impersonation, harassment and bulk automated use of the service. Where we can technically stop abuse — rate limits, blocks, removing content — we do.

Children

The service is not built or aimed for children, and we do not knowingly keep information about them. There is nothing to hand over on request, because nothing is collected in the first place.

Changes

When this page changes, the new version replaces the old one here. There is no mailing list to notify, for the reason given above.

Questions

Write to the address shown in the footer of every page. Include the inbox address and the approximate time — without those two details a request usually cannot be traced.

← Back to all docs