Privacy Policy

Scope and operator

This notice covers the Temp Mail Ace website and its temporary inbox service. The operator and contact information below identify the party responsible for operating this deployment.

The service is not an end-to-end encrypted mailbox. Message processing and storage are required to receive and display email; use it only for information appropriate to a temporary inbox.

Operator: Not yet supplied by the operator
Providers & processing locations: Not yet supplied by the operator
Additional retention disclosure: Not yet supplied by the operator

Public details last changed: 2026-10-10

Data used to provide the inbox

The service processes inbox addresses, creation and expiry times, access credentials, and incoming mail. Incoming mail may include the sender, recipients, subject, message body, attachments, received time and extracted verification codes or links.

Connection information, including an IP address, is processed for delivery and abuse prevention. Internal analytics are separate: their stored event records do not include raw IP addresses, full referring URLs, email bodies or verification-code values. Infrastructure providers may have their own connection logs, as described in the operator’s deployment disclosure.

Browser storage and cookies

Local browser storage holds an inbox identifier, address, access credential, recent inbox history, a browser identifier, language and theme preferences. Clearing site data can remove access. The email address is not an access password.

Functional cookies support short-lived live-message access; operator sign-in uses separate security cookies. First-party measurement uses a visitor cookie with a 30-day lifetime and a stored hashed identifier rather than its raw value. The opt-out preference uses a separate cookie for one year.

First-party measurement and your choice

Internal event statistics cover homepage visits, inbox creation, received messages, message opens, code-copy and link-copy actions. They may include the referring site’s hostname and a country code when supplied by a trusted configured proxy. No email body or copied code value is stored in these event records.

Analytics events are scheduled for cleanup after 30 days. The choice below stops future first-party event recording in this browser. It does not erase events already recorded or change essential inbox functionality. Blocking or clearing cookies can reset the choice.

Your analytics choice

This browser choice does not change essential inbox access or erase past event records.

Expiry, deletion and retention

The current defaults for newly created free inboxes and the application’s message-retention setting are shown below. Your own inbox countdown is authoritative for that inbox; changing a default does not extend an existing address.

Inbox records become unavailable on expiry. Application cleanup removes expired inbox records and their messages, or removes older messages when the retention limit is reached. Attachment deletion is queued and retried if storage deletion fails, so physical removal may occur after access has ended.

Deleting application data does not by itself guarantee immediate deletion from database backups, SMTP queues, provider logs or the original IMAP mailbox. Original imported mail may be kept or deleted according to the operator’s source-mail setting. The actual providers, regions and additional retention periods must be declared below.

Pro Plus is a personal account. Its inbox, archive and deleted items remain within its storage quota while subscribed. Only the signed-in account owner can restore deleted mail and original addresses throughout the active subscription; there is no separate seven-day recovery cutoff. Renewing extends retention. After expiry, a read-only grace period applies, seven days by default. Free and Pro follow their own displayed expiry and retention limits.

To prevent an old address being assigned to someone else, the service retains a SHA-256 fingerprint of every generated address indefinitely, including after inbox deletion. The fingerprint ledger contains neither message contents nor access credentials. The original address can be restored only with the original inbox and its owner authorization; knowing the address does not authorize restoration. Addresses already physically removed before this reservation system was introduced may not be present in the ledger.

CURRENT APPLICATION SETTINGS

Default free inbox lifetime: 15 minutes
Application message retention: 24 hours
Active free inbox limit: 3 inboxes per browser

These are current service defaults, not a promise that an existing inbox lasts this long. Read your inbox countdown.

Images, attachments, providers and advertising

If you enable external images, your browser contacts the image host; that host may learn connection information and that the message was opened. Following message links or downloading attachments introduces separate risks and may involve other providers.

Email delivery, hosting, storage and any active advertising or measurement provider are part of the operator’s deployment disclosure. Reserved advertising spaces are placeholders; this release does not load Google advertising. The mail workspace and private communications are excluded from the proposed Google advertising integration. Any future integration needs updated provider, cookie and consent disclosures. This notice does not promise that a linked service follows the same practices.

Access, deletion and privacy requests

You can delete an inbox or message using the workspace controls and manage browser permissions for notifications. Clear local browser data only after saving anything you need, because it may remove access.

For privacy or data-access requests, use the published privacy contact. Explain the request without sending mailbox access credentials, recovery secrets or verification codes. The operator may need proportionate verification before acting. Applicable rights and obligations depend on the laws that apply to the operator and your situation.