Legal
Privacy Policy
This policy explains how TempHotmail processes information when you use the website, create an account, or purchase a paid plan.
Last updated: July 17, 2026
Information we process
- Temporary messages may include sender, recipient, subject, text, HTML, authentication headers, raw size, and attachments. Paid-mail attachments are stored in private Supabase storage.
- Free guest-inbox session data is kept in browser local storage until the address is replaced or site data is cleared.
- Account email, authentication data, mailbox records, and plan status are stored through Supabase when you create an account.
- Stripe processes payment details. TempHotmail stores only the identifiers and status needed to manage purchases and subscriptions.
- Basic device, request, and analytics data may be processed to operate, secure, and improve the service.
How we use information
- Provide, maintain, and secure the temporary inbox service
- Restore saved inboxes and apply plan entitlements
- Process transactions and manage subscriptions
- Diagnose failures, prevent fraud, and respond to support or abuse reports
Retention
Guest inboxes depend on the browser session and upstream mail provider. Signed-in users can save up to 3 free inboxes for at most one day, and provider availability may end earlier. The 7-Day Pass retains messages for 7 days; Pro retains them for 30 days. Attachments follow the message retention period. Billing, security, and legal records may be kept longer.
Service providers
- Vercel: hosting and delivery
- Supabase: authentication and database
- Stripe: payment processing, billing, and fraud prevention
- Mail providers: temporary address generation and incoming message delivery
- Cloudflare: Email Routing and Workers for inbound paid-domain mail
- Upstash Redis: rate limiting and abuse prevention
- Google Analytics: analytics operating through Consent Mode; in regions requiring consent, analytics storage remains disabled until consent
Your choices
In regions where consent is required, Google's consent message lets you accept, reject, or manage Analytics and advertising choices. You can change your choice through Privacy and cookie settings when available. You may also request access to or deletion of account data where applicable.
Google AdSense and advertising technologies
When advertising is enabled on eligible public editorial pages, Google and its advertising partners may place or read cookies and may use web beacons, IP addresses, and device or browser identifiers to deliver and measure ads and prevent fraud.
Google may use this data to serve personalized or non-personalized ads according to your settings, consent, and region. We do not send temporary email addresses, message content, or mailbox identifiers to Google as advertising parameters.
Your advertising choices and consent
Before eligible ad requests are sent for users in the EEA, the United Kingdom, or Switzerland, we use a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. The message provides choices to consent, refuse, or manage purposes and vendors.
You can change advertising choices through the privacy and cookie settings link shown with the consent message, and you can manage Google ad personalization in Google Ads Settings.
Pages where we do not show ads
We do not load Google ads in the inbox, message details, screens centered on private communication, sign-in, account dashboards, payment flows, or next to core email controls.