Temporary addresses
Used only for receiving email and the countdown, then deactivated after no more than 24 hours.
PRIVACY LEDGER
Why each type of data exists—and when it leaves
This policy explains what information TMPF processes to provide temporary email, long-term forwarding, and secure sign-in. We define retention by function and never use temporary inbox content to build advertising profiles.
Forwarding records
Logged-in users can review delivery activity from the past 30 days; it is then automatically cleared.
Security information
Verification codes and authenticator keys are used only to confirm identity—not for marketing lists.
Request access
For privacy questions, contact support@tmpforward.com directly.
Retention periods and processing limits
The periods below start when the relevant feature is used. Individual records may be retained longer when necessary for security, fraud investigations, or legal obligations.
| Information category | Purpose | Typical retention | How it is deleted |
|---|---|---|---|
| Temporary address and access token | Create and open a temporary inbox | 3 hours by default, extendable to 24 hours | Cleared when it expires or you switch addresses |
| Temporary email body and attachments | Display incoming mail on the current page | For as long as the temporary address is active | Individual deletion or address expiration |
| Login email and alias settings | Maintain forwarding and account access | While the account is in use | Delete the alias or submit an account request |
| Delivery metadata and message body | Show delivery status, troubleshoot, and retry | Up to 30 days | Automatically rotated or individually deleted |
| Security logs | Rate limiting, abuse prevention, and incident investigation | A reasonable security window | Aggregated or deleted on schedule |
1. Who is responsible for processing
TMPF is responsible for processing information generated while operating this website and its products. We process data only as needed to provide the features you choose, maintain security, or meet legal obligations.
If you receive messages from third parties through an alias, the sender is responsible for the content they send and the legal basis for contacting you. This policy does not replace the privacy notice of any third-party website.
2. What the temporary inbox collects
When you create a temporary address, the system generates the address, access token, creation time, and expiration time. When mail arrives, we process the sender, subject, body, attachments, and necessary delivery metadata so the message can be displayed on the page.
A temporary inbox does not require your name, password, or long-term receiving email address. Do not use it for important information you cannot afford to lose access to when the address expires.
3. What forwarding aliases collect
Forwarding requires your receiving email address so the system knows where to send messages arriving at the alias. We also process the alias address, active status, creation time, delivery status, and records from the past 30 days.
A paused alias will not forward new messages. Deleting an alias stops future delivery to that address, but security records that must be retained by law may not disappear immediately.
4. Identity verification and 2FA
Sign-in codes confirm that you can access the receiving email address and remain valid only briefly. If you enable authenticator-based codes, we store the key material needed for verification and restrict its use with access controls.
We will never ask you to provide an authenticator code to support staff. Any non-site page requesting your current verification code should be treated as suspicious.
5. Legal bases and purposes
Core processing is necessary to provide the service you request, including creating addresses, displaying email, forwarding messages, and managing settings. Security logs and rate limiting are based on our legitimate interest in protecting the website, users, and email infrastructure.
Where local law requires consent, we will offer the relevant choice before processing. Refusing non-essential processing will not affect the core temporary email function.
6. Cookies and local storage
The page uses browser storage to save temporary email tokens, expiration details, and forwarding sign-in sessions, so you can resume your work after refreshing. We do not use this to track your browsing across websites.
Clearing browser storage may remove access to temporary addresses that have not yet expired and will also sign you out of the forwarding dashboard. You can clear it anytime in your browser settings.
7. Information sharing
We may use providers for hosting, email delivery, security monitoring, and infrastructure operations. Providers may process only the information necessary under our contractual instructions and may not use content for their own advertising.
We may disclose limited information to authorized authorities when required by valid law, an urgent security incident, or the protection of legal rights. We review the scope of each request and limit disclosure where permitted.
8. International transfers and security
Network infrastructure may result in data being processed outside your region. When processing crosses borders, we use contracts, access controls, and other applicable safeguards.
No system can promise absolute security. We reduce risk through least-privilege access, short retention periods, transmission protections, and operational audits. We also recommend that you avoid receiving highly sensitive secrets.
9. Your choices and rights
You can delete individual temporary emails, switch to a new address, pause or delete aliases, and clear browser sessions. Applicable law may also give you rights to access, correct, delete, restrict, or object to processing.
When you submit a request, we may need to verify your control of the relevant email address to avoid giving information to the wrong person. We will respond within the applicable period and explain why we cannot fulfill a request when necessary.
10. Children and improper content
This service is not intended for children below the local age of independent consent. A parent or guardian who believes a child has provided personal information to us may contact us to request its deletion.
Users may not use the service to receive, distribute, or facilitate unlawful or abusive content. Our security team may restrict related addresses to investigate clear abuse.
11. Policy changes
We may update this policy when product features, legal requirements, or infrastructure change. Significant changes will be highlighted on this page with a new effective date.
Updates will not retroactively use existing data for new purposes incompatible with the original purpose. Review changes relevant to you before continuing to use the service.
12. Contact us
Send privacy requests, questions about data retention, or security concerns to support@tmpforward.com. Say whether your request concerns a temporary inbox or forwarding alias, but do not include verification codes or complete sensitive message content.
We will first confirm the scope of your request and may require verification that you control the email address. General product support is also available at the same address; please identify the issue type in the subject line.