How Temp Mail handles your data

Temp Mail is published on Google Play by TempGenerator, which is responsible (the “controller”) for the personal data described here. Our details are listed at the top of this page and in our legal notice. Write to support@tempgenerator.com or use our contact form. Where we have appointed a representative in the EU or the UK, they are listed at the top of this page too. We have not appointed a data protection officer.

• Device key and address list. When you first create an address or open the domain list, the app registers with our server and receives a random device ID and secret. These, and the list of your addresses (each inbox’s ID, the address and when it expires), are kept in Android’s Keystore-backed secure storage, which is excluded from cloud backups and device-to-device transfers.
• Settings. Your theme, language, image loading, link confirmation, haptics and motion choices are stored in the app’s own storage. They stay until you uninstall the app: Forget all addresses doesn’t reset them.
• Ad consent. Your advertising consent choices are stored on your phone by Google’s User Messaging Platform.
• Temporary files. Attachments you share are written to the app’s cache, and the in-app email viewer may keep cache files. Forget all addresses clears them, and Android may clear the cache at any time.
• Clipboard. Codes, addresses and links you copy go to your phone’s clipboard.

Uninstalling the app removes everything it stored on your phone.

When the app registers, our server stores a device record: the random device ID, a one-way hash of the device secret (never the secret itself), the platform and app version, the IP address it registered from (the full IPv4 address, or the /64 network for IPv6), when it was created and last active, and when you may next create an address. It lets the app open its own inboxes and lets us limit how many addresses one phone or network can create. It is deleted when you use Forget all addresses, or 60 days after its last activity once it has no address left.

If you create an account (optional). You only need an account to choose your own address names and keep them longer. It is the same TempGenerator account as on tempgenerator.com. We keep your username, email address, language and a one-way hash of your password; whether and when you confirmed your email; the address names you chose with their domains and end dates; and, for each phone you sign in on, a sign-in key stored on our side only as a one-way hash, linked to that phone’s random device record, with the time it was last used.

Address limit. A phone can hold up to 5 live addresses without an account, and an account up to 10 across its phones. When you sign in, the addresses on that phone are linked to your account, and so is each address you create while signed in, so that we can count them. The link ends when the address ends or you delete your account.

Email codes. To confirm your email or reset your password, we send you a 6-digit code from our own mail server, from an address on tempgenerator.com, so no email provider receives your address. We store the code only as a one-way hash. It works once, for 15 minutes, and is deleted when used or replaced. If someone tries to create an account with an email that already has one, we send that address a short notice instead.

Names are never reused. So that nobody can ever receive mail meant for someone else, such as a password reset, our server keeps a permanent list of every address name that has been used, random or chosen: only the name, the domain, where it came from and when it was first and last used. A name is never given to a second person. A name you chose stays reserved to your account; after you delete the account, it stays locked and is no longer linked to you.

Guest names. Without an account you can choose a name for up to 7 days. It is linked only to that address and your phone’s device record, can’t be extended or brought back, and is never given out again.

Custom addresses. Mail to an address you chose stays until the address ends, up to the newest 100 messages, then it is deleted with the address.

Why. To provide the account and names you asked for (contract), and to keep accounts secure and prevent abuse (legitimate interests). Requests to create, bring back or extend a name (the name, domain, days chosen, device and account) are kept for 30 days to prevent abuse.

How long. Account data stays until you delete your account. Sign-in keys are deleted when you sign out, reset your password, sign a phone out on the website, erase the phone’s data or delete your account, or after 180 days without use.

Deleting your account. In the app: Settings › Account › Delete account. On the web: sign in at tempgenerator.com, open Account and choose Delete my account. Your account, your custom addresses and their mail are deleted right away, and every phone is signed out.

Every message sent to your address is stored on our server so the app can show it to you: the sender, subject, text, images and attachments. This often includes other people’s personal data, such as a sender’s name and email address.

A normal address lasts 60 minutes. If you watch an optional rewarded ad for an address, it lasts 1–30 days from the moment our server confirms the reward, and never more than 1–30 days and 60 minutes after it was created. Mail is deleted at the earliest of:

• the end of the address timer shown in the app;
• 60 minutes after it arrives, on a normal address (on an extended address, mail stays until the address expires);
• on an extended address that already holds 100 messages, when a new message arrives: the oldest one is removed to make room.

A normal address accepts up to 100 messages and refuses any more, so nothing on it is deleted to make room.

Our cleanup runs about every 10 minutes, so deletion can take a few minutes longer. Delete now and Forget all addresses erase an address and its mail at once. Remove from this phone only forgets the address on your phone: our server deletes it when it expires. Database backups may keep copies for up to 30 days; an address expiring doesn’t erase those copies sooner.

If you send mail to a Temp Mail address: we process your message for the person who uses that address, only to show it to them, and delete it as described above. You have the rights described in this policy. We don’t notify senders individually, because that is impossible or would take disproportionate effort (GDPR Art 14(5)(b)).

Emails often contain remote images that tell the sender when, where and on what device a message was opened. Temp Mail blocks them by default. You can show images for a single message, or turn on automatic loading in Settings; when images load, the sender’s servers receive a request from your phone, including your IP address. Scripts inside emails never run, and before a link opens, the app can show you where it really goes.

• Rate limits. Counters of recent requests per IP address are kept in memory for a few minutes. Per-network cooldown records are deleted about 24 hours after the cooldown ends.
• Web server logs. Our web server records the IP address, time, requested path and browser or app identifier of each request, and keeps these logs for 14 days to keep the service running and secure.
• Application logs. The logs of our mail server don’t contain IP addresses.

This website loads no ads or third-party analytics scripts. Google Play buttons use a short redirect that counts requests by UTC day, page, button and language, without cookies or storing IP addresses or visitor identifiers in these counters. Repeat clicks can be counted more than once. Campaign tags are passed to Google Play; Google processes store visits and installs under its policies. If you enable app analytics, Firebase can report campaign-attributed first opens and rewarded-ad actions (including the reward placement) by approximate country. These are separate metrics; a button click does not prove an install. When you use the contact form, we store your name, email address, topic and message to answer you and to handle requests about your rights. We keep them for 12 months after the conversation ends, then delete them automatically. The contact page sets two strictly necessary cookies, laravel_session and XSRF-TOKEN, which expire after 120 minutes; while they last, our server keeps a session record with your IP address and browser identifier. To limit abuse, the form counts messages per IP address for up to 24 hours. We send our replies, and any confirmation of your message, from our own mail server, from an address on tempgenerator.com, so no email provider receives your address.

Temp Mail is free because it shows ads from Google AdMob:

• A banner at the bottom of the inbox screen, below your mail.
• One ad card in the inbox, marked as an ad, between your address and your messages.
• Occasional full-screen ads at two natural breaks: sometimes when you get a new address without watching a short video, and sometimes when you go back from a message to the inbox. You see at most one every 3 minutes. To space them out, the app keeps the time of the last one on your phone.

Ads never appear inside a message, during onboarding or in Settings. You can also choose to watch short videos. These are rewarded ads, and a button always says what you get before you tap it:

• Keep an address for 1–30 days: one video per random address makes it last 1–30 days instead of 60 minutes, and its mail stays until it expires.
• Your own address name: one video creates a name you choose, for the time you pick (up to 7 days without an account). With an account, one video brings back one of your earlier names, and each further video adds 30 days, at most 3 videos per name every 6 hours.

To show and measure ads and to prevent ad fraud, Google’s ads software in the app collects your device’s advertising ID and app set ID, your IP address and the approximate location derived from it, your device type, operating system, language and app version, how you interact with ads, such as views and taps, and diagnostics such as crash data.

How a reward is confirmed. When you finish a short video, Google tells our server directly, so rewards can’t be faked. For this, Google receives your random Temp Mail device ID and the reward you chose: the internal ID of the address you keep, or a random request ID for your own names. Google never receives the name you chose, your email or your account details. Our server records each confirmation (its transaction ID, the reward type, the device and, for a kept address, the address) and deletes these records after 30 days. We never receive your advertising ID.

Google’s role. Google acts as an independent controller for the data its ads software collects, under its own policies. Read how Google uses information from apps that use its services at policies.google.com/technologies/partner-sites, and Google’s data protection information for businesses at business.safety.google/privacy. We don’t use other ad networks.

Your consent. In the European Economic Area, the United Kingdom and Switzerland, the app asks for your choices through Google’s User Messaging Platform, a certified consent tool, before any ad loads. The ad partners are listed in that form.

• If you consent, Google may show personalised ads.
• If you allow storage on your device but not personalisation, Google shows non-personalised ads based on the app’s context.
• If you don’t consent, Google shows limited ads, which use no advertising ID and no personal data for personalisation; Google still uses your IP address to deliver the ad. We have turned off programmatic limited ads, so no cookies or local storage are used for ads without your consent.

Changing your choices. Open Settings › Your data › Ad privacy choices (shown where the law requires it) to review or withdraw your consent at any time. You can also reset or delete your advertising ID in your phone’s Settings › Privacy › Ads. We limit ad content to a PG maturity rating.

If you enable email notifications, Google Firebase Cloud Messaging (FCM) processes an installation identifier and delivery token to reach your phone. Our server links the token, app language and preview preference to your existing random device record. Notifications cover addresses belonging to that device only, until each address expires, including extended addresses. With Message previews enabled, Google also processes the sender, subject and a short plain-text excerpt for display on your phone. Turn previews off in Settings for generic alerts without that content. Delivery data includes internal message/address identifiers and expiry time; it does not include your device secret, attachments or the full message. These optional notifications are separate from Analytics and Crashlytics consent. You can disable them in the app or phone settings. Disabling them in the app removes the server registration when the phone next connects; Forget all addresses also removes it. Inactive registrations stop receiving after 60 days and are deleted with the device record. Messages already sent to Google may remain queued for up to 24 hours, limited by address expiry. Google processes delivery data under its applicable terms, including outside your country. Firebase privacy information. Expiry reminders are sent at 10 days, 5 days and 1 day remaining, when applicable, and once after expiry. Internal address and device identifiers and the expiry time may be retained for up to 24 hours after expiry to deliver that last notice; no email content is kept for this purpose. Manual address deletion cancels its reminders.

Starting with Android version 1.0.1, two separate choices in Settings → Usage & diagnostics control Google Analytics for Firebase and Firebase Crashlytics. Both are off until you opt in. The app works if you decline. Analytics records fixed screen names and app events, app/device information, approximate location and a random app-instance identifier. Crash reports contain stack traces, app/OS/device information and installation identifiers so we can find and fix failures. Our app telemetry excludes mailbox addresses, message contents, verification codes and device secrets. Analytics advertising-ID collection and ad personalisation are disabled. Google processes these reports, including outside your country, under its applicable data-protection terms. Our legal basis is your consent. Disable either choice in Settings to stop future collection; this does not erase reports already received. Crashlytics retains reports and associated identifiers for 90 days before starting deletion. Analytics retention follows the property's configured retention period. Forget all addresses deletes mailbox data, not reports already held by Google. For deletion requests, contact us. Firebase privacy information.

• Running the service (creating addresses, receiving and showing mail, confirming rewards): performance of a contract, GDPR Art 6(1)(b).
• The device record, IP-based abuse limits and security logs: our legitimate interest in preventing mass registration, spam and abuse and keeping the service secure, Art 6(1)(f).
• Personalised ads, and any storing or reading of information on your device for ads: your consent, Art 6(1)(a) and Art 5(3) of the ePrivacy Directive.
• Answering contact form messages: performance of a contract, or our legitimate interest in answering you, Art 6(1)(b) and (f).
• Meeting legal obligations: Art 6(1)(c).

You have the right to object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests, including the device record, abuse limits and security logs. We then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or need the data to establish, exercise or defend legal claims. Because the app can’t work safely without the device record, the simplest way to object is to use Forget all addresses and uninstall the app. You can also contact us.

• Google (Google Ireland Limited and Google LLC), for ads and reward confirmation, and Google Play, which distributes the app.
• Contabo GmbH, which hosts our servers on our behalf in its data centre in Lauterbourg, France (EU).
• Authorities, only when the law requires it.

We send all our emails (account codes, notices and replies) from our own mail server, so no email provider receives your address. We don’t sell your mail or share it with anyone else.

Our servers are in the EU (France). Google may process ads data in the United States and in other countries where it operates. For the United States, Google LLC is certified under the EU-US Data Privacy Framework, its UK Extension and the Swiss-US Data Privacy Framework, and Google’s controller terms include the European Commission’s Standard Contractual Clauses as a fallback. To get a copy of these safeguards, use our contact form.

Traffic between the app and our server is encrypted with HTTPS. Device secrets are stored on our side only as one-way hashes, and each inbox can only be opened by the device that created it. Account passwords, sign-in keys and email codes are stored only as one-way hashes. App custom addresses open only on a phone signed in to their account (or, for a guest name, the phone that made it). No system is perfectly secure, so please don’t use Temp Mail for sensitive mail.

Depending on where you live, you have the right to access, correct or delete your personal data, to receive a copy of it, to restrict or object to its processing, and to withdraw your consent at any time with Ad privacy choices, without affecting processing before that. Without an account, the quickest way to erase your data is Forget all addresses. With an account, delete it in the app (Settings › Account › Delete account) or on tempgenerator.com; for anything else, contact us. We answer within 30 days, and if a request is complex we may extend this by two months, telling you why.

Complaints. Please tell us first by choosing Privacy complaint in the contact form: we acknowledge every complaint within 30 days and tell you the outcome. You can also complain to a data protection authority: the one where you live or work in the EU (list of EU authorities), the UK Information Commissioner’s Office (ico.org.uk), or the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch).

You don’t have to tell us anything about yourself unless you create an optional account. Registering the device is required for the app to work: without it, the app can’t create or open addresses. We don’t make decisions about you with legal or similarly significant effects by automated means. With your consent, Google may use profiling to personalise ads.

If you live in a US state with a consumer privacy law, such as California or Connecticut:

• What we collect: identifiers (device ID, advertising ID, IP address), internet activity (how you interact with ads), approximate location derived from your IP address, and the content of mail sent to your addresses.
• Sources: your phone, the app, and the people who send mail to your addresses.
• Purposes: providing the service, confirming rewards, preventing abuse, security and ads.
• Third parties: Google, for ads and reward confirmation.
• Sale, sharing and targeted advertising: under some state laws, personalised ads may count as a “sale” or “sharing” of personal information, or as “targeted advertising”. We don’t sell personal data for money. Opt out with Ad privacy choices in the app’s settings, where Google shows the opt-out for your state, or by deleting your advertising ID in your phone’s settings.
• Your rights: to know what we collect, to get a copy, to correct or delete it, and to appeal if we refuse. We won’t treat you differently for using these rights. An authorised agent may make a request for you. We answer within 45 days.
• Minors: we don’t knowingly sell or share the personal data of anyone under 16.

We don’t respond to browser Do Not Track signals, because there is no common standard for them. Google and its partners may collect information about your activity across apps and websites over time, as described in the section on ads.

Temp Mail is for adults: you must be 18 or older to use it, and it is not directed at children. We don’t verify age, and we don’t knowingly collect children’s data. If you believe a child has used the app, contact us and we’ll delete what we can find.

We update the date at the top of this page whenever this policy changes. We tell you about significant changes in the app and on this website before they take effect.

Questions about privacy? Write to support@tempgenerator.com, or use our contact form and choose Privacy question.