Privacy Policy

last modified April 8th of 2023

Mobile refers to the mobile app available for smartphones.
Website refers to the website, https://tempmail.lol/

Data we collect (Mobile and Website)

We collect a minimal amount of information on our users. This includes the following:

  1. HTTP logs which may contain User-Agent, IP address, HTTP headers, and full-URL.
  2. The email address generated by visiting our services.
  3. An authentication token generated which gives you access to your temporary email.
  4. A number of how many current users are connected to our services (displayed publicly).

We cannot guarantee that the above information is stored, only that it may be stored.
Note: IP addresses are persistently stored only if there are site errors (such as 404 errors). In the event of an IP address reaching the rate-limit for email generation (30 generations per 60 seconds starting on the first email generation), that IP address will be stored by Cloudflare and may be accessed by our staff.

IP addresses will be stored in-memory for no more than 5 (five) minutes when submitting a public pool domain. This is to prevent DDoS attacks.

We do not match IP addresses to any email address generated; however, Cloudflare, an unaffiliated service which we use to proxy our traffic, may collect this information, please review their privacy policy at the following link: https://www.cloudflare.com/privacypolicy/.

Email addresses and tokens generated are ephemeral, and will be erased after ten (10) minutes of last access, or will be erased regardless of last access time in one (1) hour after the initial email generation.
The main page, https://tempmail.lol, will access the server every five (5) seconds.

Data sharing

We do not share our data of our users knowingly. We require users connect to our site using encryption, which is managed automatically by modern browsers. Emails sent to our server are sent unencrypted over the Internet, but encrypted before being sent to users.

Data may be shared to an unaffiliated third-party Google Analytics for analytical data and Google Adsense for advertising.
See their privacy policy at the following link: https://policies.google.com/technologies/partner-sites.

For the mobile version, data may be shared to an unaffiliated third-party Google AdMob for advertising.
Upon opening the app, you shall be prompted if you wish not to be tracked. If no such prompt is shown, you will not be tracked by default.
If you are tracked, you are subject to data collection via Google AdMob, see their privacy policy at the following link: https://developers.google.com/admob/ios/data-disclosure

Proof of ownership (Mobile and Website)

We do not allow for any kind of registration on our platform; therefore, information regarding accounts and their ownership is non-existent.

Data Usage (Mobile and Website)

The above data is sent through third-party servers which are not affiliated with our services:

  1. Cloudflare
  2. Oracle Cloud

Erasure (Mobile and Website)

Any logs stored on our end, such as IP addresses, browsers, HTTP headers, and User-Agents, are deleted at midnight (UTC time) every Sunday.

Your email address that is generated if you do not access our website within 10 minutes of it being generated. This is done automatically.

Users may request data erasure by emailing [email protected]. Please wait at most two weeks before the request is made. You may or may not receive a response email.

No user data is kept on our servers for more than three (3) weeks worth of time.