Privacy Policy

1. Introduction

Temp Mail AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our temporary email service ("Service").

By using our Service, you consent to the practices described in this Privacy Policy. We encourage you to read this policy carefully and contact us with any questions.

2. Information We Collect

2.1 Information You Don't Provide

Unlike most online services, we intentionally minimize data collection:

• No registration required: You don't need to create an account
• No personal information: We don't ask for your name, real email, or any identifying data
• No phone number: We don't require phone verification
• No payment information: The service is free

2.2 Temporary Security Data

For security and fraud prevention purposes, we may temporarily process:

• IP addresses: Used temporarily for abuse detection and fraud prevention only. Kept for a short rate-limit window, then cleared. Not linked to your email activity.

2.3 What We Don't Do

• No copies of your email: This site does not save the emails you receive
• No user profiling: We don't build profiles based on your activity
• No cross-site tracking: We don't track your activity outside our site
• No data selling: We never sell or share your information with data brokers

2.4 Your Temporary Inbox

Your address and the emails sent to it are held by the mail provider that runs the inbox: mail.tm, with Guerrilla Mail as a fallback. Their own privacy policies and retention rules apply to that mail (mail.tm keeps each message for 7 days). This site fetches your messages to show them on the page and does not keep copies. Your browser stores the current address and its access token in local storage, so the same inbox opens when you come back, for up to 7 days after your last visit. Press New address or clear this site's data to drop it. The recovery key and QR code under the address contain that access token: anyone who has them can read the inbox.

Inbox assistant: When you ask the assistant a question, the sender, subject and first 200 characters of each email are sent to Google's Gemini model to answer it. We do not store the question or the answer.

Check for spam: When you press Check for spam on an email, that email's sender, subject and text are sent to the same model, which labels it. We do not store the result.

3. AI Processing and Email Analysis

The AI features only run when you use them. Nothing is sent to an AI model unless you press Check for spam on an email or ask the inbox assistant a question:

• Check for spam: labels one email as likely spam or fine
• Inbox assistant: answers your question about the mail in the inbox, for example finding a code or summarising what arrived

Important: We do not store AI results, and we do not use your email content to train or improve any model. Verification codes and links are picked out in your browser without any AI.

4. Cookies and Tracking Technologies

4.1 Cookies and local storage

This site sets no cookies of its own. Your browser's local storage keeps a few small settings on your device, such as light or dark mode and whether you've already seen a tip. Your inbox lives in the open tab and is not saved in a cookie.

4.2 Analytics Cookies

We use Google Analytics to count visits and see which pages people use. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

4.3 Advertising

The site shows no ads at the moment and loads no advertising code. If that changes, this section will be updated first and the cookie banner will ask before any advertising cookies are set.

5. How We Use Information

We use collected information solely for:

• Providing and maintaining the temporary email service
• Processing AI analysis when you explicitly request it
• Improving and optimizing our Service
• Ensuring security and preventing abuse
• Complying with legal obligations

6. Information Sharing and Disclosure

We do not sell your personal information. We may share information only in these limited circumstances:

• Service Providers: With trusted partners who help operate our Service (e.g., hosting, AI processing), bound by confidentiality agreements
• Legal Requirements: When required by law, court order, or government request
• Safety: To protect against fraud, abuse, or threats to safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Data Retention

• Temporary Emails: Held by the inbox provider under its own rules (mail.tm keeps messages for 7 days). This site keeps no copies on its servers. Your browser keeps the current address and its access token for up to 7 days after your last visit
• Inbox assistant: Not retained; processed in real time only
• Analytics Data: Kept under Google Analytics' own retention settings
• Server Logs: Kept by our host, Vercel, for a short period, then deleted automatically

8. Your Privacy Rights

8.1 GDPR Rights (European Users)

Under the General Data Protection Regulation, you have the right to:

• Access: Request information about data we hold (minimal due to our design)
• Rectification: Correct inaccurate information
• Erasure: Request deletion (automatic with temporary emails)
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a portable format
• Object: Object to processing for marketing purposes
• Withdraw Consent: Withdraw consent at any time via cookie settings

8.2 CCPA Rights (California Residents)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Say no to the sale of personal information (we don't sell data)
• Access your personal information
• Request deletion of your information
• Not be discriminated against for exercising your rights

8.3 Exercising Your Rights

To exercise any of these rights, please contact us at samuel@samuelbuilds.co.uk. We will respond within the timeframes required by applicable law (typically 30 days for GDPR, 45 days for CCPA).

9. Security Measures

We implement appropriate technical and organizational measures to protect your information:

• TLS encryption for all connections to the site
• Hosting and databases on established cloud providers (Vercel and Supabase)
• Access controls and authentication for internal systems
• No copies of your emails kept by this site

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

11. International Data Transfers

Our Service operates globally, and your information may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission where required.

12. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Browser Extension

The Temp Mail AI extension for Firefox, Chrome and Edge puts a temporary address in your browser toolbar. It collects nothing for us: no analytics, no tracking, no ads and no remote code, and it never sends anything to temp-mail-ai.com. The Google Analytics described above applies to this website, not to the extension.

It talks only to the mail.tm public API (api.mail.tm), which runs the inbox. It asks for mail.tm's domains, creates an account with a random address and a password made on your device, signs in to read your messages, and deletes the old account when you press New. It uses mail.tm only, with no fallback providers. mail.tm sees these requests, including your IP address, and holds the mail under its own terms; it says it keeps messages for 7 days.

On your device the extension keeps the current address, its mail.tm password and sign-in token, the message list, messages already loaded and which ones you have read, in the browser's extension storage. It is not synced. Pressing New or removing the extension deletes it.

Permissions: storage (the inbox above), alarms (a check for new mail at most once a minute while you have an inbox, for the unread badge), context menus, active tab and scripting (only for "Fill with temp address": when you choose it, the extension types your address into that field and reads nothing from the page), and access to api.mail.tm only. If any of this changes, this section changes first.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Significant changes will be communicated through a prominent notice on our Service. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.