Data boundaries
Privacy is more than a promise—it means clear retention periods
This policy explains what data AddyTemp processes when providing disposable email and long-term forwarding, why we process it, and how you can control it. Last updated: September 28, 2026.
What we process
When you create a temporary email address, the service processes the random address, access token, expiration time, and messages sent to that address. The token is stored in your browser to prove that you can read or delete the inbox; do not share it with anyone.
When you sign in to long-term forwarding, we process your receiving email address, verification results, aliases you create, and delivery status. If you enable an authenticator, the service also stores a server-protected version of its secret to verify one-time codes.
AddyTemp’s operator is the controller of this data. You can write to support@addytemp.com to request access to, correction of, deletion of, or restriction of data linked to a signed-in account. Message content is shown to you in the inbox or archive only. We do not use it to build advertising profiles, and we do not sell it to data brokers.
| Data | Purpose | Typical retention |
|---|---|---|
| Temporary address and token | Create, read, extend, and delete the current inbox | Until the address expires or you change the address |
| Temporary email content | Display messages in the browser | Cleaned up with the temporary inbox lifecycle |
| Forwarding delivery records | Verify the subject, sender, and delivery status | Up to 30 days |
| Security and access logs | Rate limiting, abuse prevention, and troubleshooting | For the shortest period needed for security |
| Support emails | Respond to questions and track resolution | Cleaned up according to the support record retention period after the issue is resolved |
How we use and share data
Data is used only to provide inbox, forwarding, identity verification, security, and customer support functions. To receive email and host core infrastructure, we may use contract-bound technology providers; they may process necessary data only on our instructions.
When a valid legal process is issued by a competent authority, we may respond as required by law. We review the scope of each request and, where legally permitted, seek to limit the data disclosed.
Security, children, and international processing
We reduce risk through access controls, encryption in transit, rate limiting, and least-privilege measures, but no internet service can guarantee absolute security. Temporary email is not suitable for banking, medical information, identity documents, or account recovery data.
This service is not intended for children below the applicable local age of digital-service consent. Infrastructure may operate across borders; when data is processed internationally, we use applicable contracts and security measures to protect it.
How long we keep data, and how deletion works
A temporary inbox keeps the random address, access token, and messages that have arrived only while that address is valid. After it expires, you replace the address, or you delete a message, that content enters cleanup and can no longer be opened as a readable inbox. We do not convert disposable mail into a long-term archive.
Delivery records for long-term forwarding are kept for at most 30 days so you can check the subject, sender, and delivery status. When you close an account or ask us to delete signed-in data, we delete or de-identify the receiving address, aliases, and the protected copy of an authenticator secret. A limited access log may remain for the shortest period needed to meet a legal duty or to handle a security incident.
Automated checks and policy changes
The service automatically checks whether a message arrived, whether forwarding succeeded, and whether a request hit a rate limit or an abuse control. Those checks exist for delivery and security. We do not score you for advertising from message content, and we do not make credit or identity decisions that affect your legal rights based only on an automated result.
This page is updated as the practice changes. If a change would alter how data already collected is used, we revise the date at the top of the page and publish the explanation on this website before the change takes effect. You may stop using the service and ask us to delete data linked to a signed-in account.
Your choices and how to contact us
You can delete messages, change your temporary address, pause or delete forwarding aliases, or sign out and clear local credentials in the interface. To request access to, correction of, deletion of, or restriction of data linked to a logged-in account, tell us the receiving email address and the specific request.
Privacy questions can be sent to support@addytemp.com. We will verify the requester’s identity and respond within the period required by applicable law.