Privacy Policy

1. Information We Collect

ILoveTempMail is designed to protect your privacy. We collect minimal information necessary to provide our service:

Device identifier — an ID for your phone, so the app finds your account again after a reinstall. On iPhone and iPad it is a random ID kept in the keychain. On Android it is the ID the phone's DRM system (Widevine) gives the app, or a random ID if the phone has none. We store it with your account, and a one-way hash of it with your phone's sign-in record.
Email content — emails received at your temporary addresses, including their attachments, are stored temporarily. See Data Retention for how long.
Push notification tokens — if you opt in to notifications, we store your device token to deliver alerts.
Pro feature data — if you use Pro features, we store what they need to work: your custom domains, the address you forward mail to, the emails you send, and the access keys you create for AI assistants.
IP address — when you create a guest mailbox on the website, we use your IP address to limit how many can be created each day. It is kept only in our server's memory and is never written to our database or stored with your mailboxes or emails.

We do not ask for your name, real email address, or phone number to create or use a mailbox. If you turn on Pro forwarding, we store the address you forward mail to.

The optional AutoFill feature in the Android app reads what is on your screen to find email fields, but that stays on your device and is never sent to us. See Android AutoFill below.

2. How We Use Your Information

To create and manage temporary email mailboxes.
To receive and display incoming emails and attachments.
To sync your mailboxes across devices when you log in.
To send push notifications about new emails (if enabled).
To provide Pro features such as custom domains, forwarding and sending email.
To show ads in the free version (see Third-Party Services).
To prevent abuse and keep the service secure.

3. Data Retention

Emails. Emails are deleted automatically, counted from when each one arrives:

Free plan (guest mailboxes and free accounts): 3 hours.
Pro: 30 days.

Attachments are deleted together with the email they arrived with. There is no archive or "recently deleted" folder.

Mailboxes. Each address has its own lifetime, counted from when the mailbox is created. Reading or receiving mail does not extend it.

Guest mailboxes (created on the website without an account): 5 days.
Account mailboxes (created in the ILoveTempMail app, or on the website after you link it to the app): 30 days by default. Pro subscribers can choose up to 6 months and extend it, and an expired account mailbox can be reactivated from the app.

When a mailbox expires, it stops receiving mail. We keep a small record of it (the address and, for account mailboxes, the account and label) so the address is never issued to anyone else and account mailboxes can be reactivated. Its emails are still deleted on the schedule above.

Deleting data yourself. You can delete an email or a mailbox at any time. A deleted mailbox stops receiving mail right away, and its emails are removed by the automatic cleanup above. You can also delete your whole account and its data at once; see Deleting Your Account below.

Sent emails. Emails you send with Pro stay in your Sent folder for 90 days.

Inactive accounts. Free accounts that have not been used for 30 days are deleted automatically, together with their mailboxes, emails, forwarding rules and sent emails. Accounts with an active Pro subscription are kept.

Once data is deleted, it cannot be recovered.

4. Deleting Your Account

You can delete your ILoveTempMail account and its data at any time, with or without the app:

In the app (iPhone, iPad and Android): go to Settings → Account → Delete account and confirm.
Without the app: go to ilovetempmail.com/delete-account, enter your recovery code (the app shows it at Settings → Account) and confirm. If you can't do either, contact support.

What is deleted. Deletion happens right away and cannot be undone. We delete your account (including its recovery code and push notification token), your mailboxes with their emails and attachments, your forwarding rules, custom domains, MCP access keys and their usage records, and the emails you sent. Every device signed in to the account is signed out.

What is kept.

A record of each address the account used (the address, when and why it was released, and the deleted account's random ID), kept permanently so the address is never issued to anyone else. It does not receive mail.
Sign-in records of each device, signed out, for up to 180 days: the deleted account's random ID, the kind of device, its name, the app version, when it was last used and, for phones, a one-way hash of the device identifier. With them, the app on that device learns that the account is gone, even after a reinstall. They are then deleted automatically.
Purchase records. We keep the purchase notices RevenueCat sends us (the kind of event, such as a purchase or renewal, and the account's random ID) for as long as tax and accounting rules require. Apple or Google and RevenueCat keep their own records of Pro purchases.
Crash reports in Firebase Crashlytics, which include the account's random ID. Google deletes them after 90 days.

Subscriptions. Deleting your account does not cancel a Pro subscription. Cancel it in the App Store or on Google Play, or it will keep renewing.

Guest mailboxes on the website are not part of an account. You can delete each one from the inbox, and they expire on their own after 5 days (see Data Retention).

We do not sell or trade your data, and we do not use the content of your emails for advertising. We share data only with the service providers listed below, as needed to run the service, or when the law requires it.

If you give an AI assistant access to your account with an MCP access key (Pro), that assistant can read your mailboxes and emails and act on your behalf, for example by sending email or deleting a mailbox. Its provider handles that data under its own privacy policy.

Authorized ILoveTempMail staff can view mailboxes, emails, attachments, sent emails and account records through our internal admin tools. We use this access only to operate the service, provide support, investigate abuse, and meet legal obligations.

6. Third-Party Services

We use the following third-party services:

Google AdMob and Google AdSense — the free version of the apps shows ads from AdMob, which Pro removes, and the website may show ads from AdSense. Google may collect your device's advertising ID, your IP address, and cookies or similar identifiers to show, personalize and measure ads, depending on your device and ad settings. When you watch a rewarded ad, the app also sends AdMob your account's random ID, so the reward is credited to your account. See how Google uses information from sites or apps that use its services.
RevenueCat — for managing premium subscriptions. RevenueCat processes purchase data from Apple and Google. See their privacy policy.
Firebase (Google) — Cloud Messaging delivers push notifications, Analytics collects app usage statistics, Crashlytics collects crash reports (with your account's random ID), and Remote Config delivers app settings. A notification shows the sender's name and the subject line (on the free plan, long numbers such as verification codes are masked). Firebase does not receive the body of your emails or your attachments. See Google's privacy policy.
Website icons (Google and DuckDuckGo) — to show a website's icon next to an email, the apps load it from Google (google.com/s2/favicons) or, if that fails, from DuckDuckGo (icons.duckduckgo.com). They receive the domain of the sender's address (in Sent, the recipient's), for example "example.com", and your IP address, but not the email itself.

7. Browser Extensions

Our browser extensions (Chrome, Firefox) access your ILoveTempMail account by reading authentication cookies scoped to ilovetempmail.com. The extensions store mailbox data locally on your device for faster loading and communicate with our API over HTTPS to manage mailboxes and emails.

When you create an address from a sign-up form, the extension sends that website's domain name (for example "example.com") to our API as the mailbox label, so you can tell your addresses apart. It is stored with the mailbox and handled like the rest of your mailbox data. The list of sites where you turned autofill off stays on your device.

The extensions do not collect browsing history, track your activity on other websites, or transmit any data beyond what is required to provide the disposable email and autofill functionality.

Google API Limited Use Disclosure — ILoveTempMail's use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

8. Android AutoFill (Accessibility Service)

The Android app has an optional AutoFill feature that fills in your ILoveTempMail addresses in other apps and browsers. It uses Android's Accessibility Service. It stays off until you turn it on yourself, and the app explains what it does before you do.

While AutoFill is on, the service reads what is on screen in other apps: visible text, field labels and hints, field types and view IDs, and which app is in the foreground. It uses this only to find email fields, show the AutoFill button next to them and fill in the address you choose.

This data stays on your device. It is not collected, sent to us, stored, shared, or used for ads or analytics.

You can turn AutoFill off at any time in your phone's Settings → Accessibility → ILoveTempMail.

9. Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS) and secure database access. However, no method of electronic transmission or storage is 100% secure.

10. Children's Privacy

ILoveTempMail is not intended for use by children under the age of 13. We do not knowingly collect information from children under 13.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the revised policy.

12. Contact

If you have questions about this privacy policy, contact us at [email protected]. To delete your account, see Delete your account.