Last updated: October 29, 2026

Tmailor is a free temporary email service you can use without an account. When you use Tmailor anonymously, we do not ask for your name and we do not build a profile about you. Your inbox and its messages are automatically deleted after about 24 hours. We process a small amount of technical data, such as your IP address, only to run the service and prevent abuse. This policy explains what we collect, why, and the rights you have.

1. Scope and Acceptance

This Privacy Policy explains how tmailor.com ("Tmailor", "we", "us", or "our") collects, uses, stores, and shares information when you use our temporary email service at https://tmailor.com. It covers both anonymous use and the optional registered accounts we offer.

By accessing or using Tmailor, you acknowledge that you have read and understood this policy. If you do not agree with it, please discontinue use of the service.

Your use of Tmailor is also governed by our Terms of Service, which prohibit using the service for any unlawful or abusive purpose.

2. Information We Collect

2.1 Anonymous Access

You can create and use a temporary inbox without registering. We do not ask for your name or any personal profile to do this.

To deliver the service and keep it secure, our infrastructure and security providers automatically process limited technical data, including your IP address, browser type, and basic request details. We use this data to route traffic, keep the service online, and prevent automated abuse — for example, bots trying to mass-create inboxes. We do not use it to build advertising profiles, and we do not link it to the contents of your inbox. Where we log IP or request data to block abuse, we keep it only for as long as security requires.

2.2 Registered User Accounts

Registration is optional. If you choose to create an account, you can sign up with:

A valid email address and password (passwords are hashed, never stored in plain text)
Google OAuth2 sign-in (subject to Google's own privacy policy)

For registered accounts, we may process:

Your email address
Basic Google profile information (only if you use Google sign-in)
Session identifiers
Authentication logs (such as sign-in time and method)
The temporary email addresses saved to your account (listed under Created Emails)

We use this information to give you access to your account and any account-linked features.

3. Email Data

Temporary inboxes are generated on demand and are available for up to 24 hours.
Messages are not stored permanently; when an inbox expires, it and its messages are irreversibly removed from our active systems.
Tmailor is receive-only and does not accept file attachments, so we do not store outbound mail or attached files.

We do not read or monitor the contents of individual inboxes, except where it is strictly necessary to operate the service, respond to a security incident, or comply with a valid legal request.

Tmailor may use an Access Token or similar identifier so you can reopen the same temporary address on a later visit. This token is used only for the inbox functionality associated with that address.

A timeline of a temporary inbox an Active inbox with a message a 24-hour clock then an empty Deleted inbox as the message dissolves

4. Cookies

Tmailor's own cookies are limited to:

Maintaining your session and language preference
Supporting logged-in account features
Basic performance and reliability

We do not use our own cookies for behavioral advertising or cross-site fingerprinting. Advertising partners may set their own cookies — see Advertising below.

5. Analytics and Performance

We use Google Analytics and Firebase to understand how the service performs and how it is used. These tools may collect:

Browser and device type
Referring pages
Session duration
Your IP address and an approximate, region-level location

We also use Cloudflare as a content-delivery and security provider, which processes your IP address and request data to serve pages quickly and block malicious traffic. We do not link this analytics or security data to the contents of your inbox.

6. Advertising

To keep Tmailor free, we may display advertisements through Google AdSense or other third-party ad networks. These networks may use cookies and ad identifiers in line with their own privacy policies.

We do not share information that directly identifies you, such as your email address, with any advertising network.

7. Payments and Billing

Tmailor is currently free and has no paid tier. If we introduce optional paid features in the future, we will update this Privacy Policy before collecting any billing information to explain what payment data is processed, which payment provider is used, and how long related records are kept.

8. Data Security

We apply reasonable administrative, technical, and physical safeguards, including:

HTTPS encryption for all traffic
Rate limiting and firewall protection against abuse
Hashed storage of account passwords
Automatic deletion of expired inbox data

No method of transmitting or storing data over the internet is completely secure, so while we take reasonable precautions, we cannot guarantee absolute security.

9. Data Retention

Anonymous inbox data is retained for a maximum of about 24 hours.
Security and abuse-prevention logs are kept only for as long as they are needed to protect the service.
Registered account data is retained until you ask us to delete it. After a verified deletion request, we remove associated account data within 30 days, unless we are legally required to keep it longer.

10. Your Rights

Depending on where you live and the laws that apply, you may have privacy rights over your personal data. These may include:

Requesting access to the personal data we hold about you
Requesting correction or deletion of that data
Requesting restriction of, or objecting to, certain processing
Withdrawing consent, where processing is based on consent
Requesting a copy of certain data in a portable format, where required by law
For California residents, opting out of certain sale or sharing of personal information, limiting certain uses of sensitive personal information where applicable, and not being discriminated against for exercising privacy rights
Lodging a complaint with your local data protection authority, where applicable

We use third-party analytics and advertising services as described in this policy. If an applicable law gives you the right to opt out of the sale or sharing of personal information related to those services, you can ask us to honor that right.

To make a request, email tmailor.com@gmail.com. We may need to verify your request before acting on it. If you use Tmailor anonymously, we may have little or no data that can reasonably identify you.

11. Children's Privacy

Tmailor does not knowingly collect personal data from children under 13, and the service is not directed to children under 13. If you believe a child under 13 has provided us with personal data, please contact us so we can remove it.

12. Legal Requests

We will comply with valid legal requests from law enforcement, including subpoenas and court orders. Because temporary inboxes are anonymous and short-lived, we often have little or no data to disclose.

13. International Users

Tmailor's servers are located in the United States. If you use Tmailor from outside the United States — including the European Union, the United Kingdom, or elsewhere — information associated with your use is processed in the U.S. and may also be processed by the service providers described in this policy, where privacy laws may differ from those in your own country.

We keep the personal data we hold to a minimum: anonymous use does not require an account, and registered accounts store only the information needed for account features. If you have questions about cross-border processing or your privacy rights, contact tmailor.com@gmail.com.

14. Tmailor API, Developer Platform and AI Connectors

This section covers the Tmailor Open API (open-api.tmailor.com), the developer platform (platform.tmailor.com) and the Tmailor connector for AI assistants such as Claude and ChatGPT (mcp.tmailor.com). Everything else in this policy also applies to them.

14.1 Account Data

To use the API or a connector you sign in to platform.tmailor.com with Google or with your Tmailor email and password. We keep your email address, name and profile picture (if Google provides one), when you accepted the API terms, your plan and your API keys. API keys are shown once and stored only as a cryptographic hash.

14.2 Connected AI Apps

When you connect an app such as Claude or ChatGPT, you approve it on platform.tmailor.com. We record which app you connected, the permissions you granted (read mail, create and delete addresses) and when. Access tokens are stored only as a hash, and other tokens only as identifiers. You can disconnect an app at any time on platform.tmailor.com/connections.

14.3 What a Connector Sends Us

A connector sends only the information a tool needs, for example the address to check or how long to wait for a message. We do not receive your conversation with the AI assistant, its memory or your files, and we do not use connector activity to build a profile of you or to show you ads.

14.4 Addresses and Messages

Addresses you create through the API or a connector belong to your account and do not expire. Delete one and it stops receiving mail and is removed from your account. Messages are kept for about 24 hours. We read message content only to deliver it to you, for example to find the links and one-time codes in a message. Messages come from senders on the internet, so treat their content as untrusted.

14.5 Usage and Logs

We count requests and created addresses per day to enforce plan limits and keep these daily totals for 13 months. When a request fails we log the time, the error, an IP address and the kind of client (for example an SDK, the local MCP server or a connector, with its version and app name). Failed-request logs are deleted after 14 days.

14.6 Sharing

We do not sell this data. Cloudflare carries and protects our traffic, and Google handles sign-in if you choose it. When a connector returns a message to your AI assistant, that content is processed by the assistant's provider under its own privacy policy.

14.7 Deleting Your Data

Deleting your account in platform settings revokes your API keys, cuts off every connected app, removes your addresses from the account and deletes your usage totals and request logs. To ask about your data, contact tmailor.com@gmail.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy here with a new "Last updated" date and, where appropriate, notify registered users. Continued use of Tmailor after an update means you accept the revised policy.

16. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Tmailor — operator of tmailor.com

Email: tmailor.com@gmail.com

Website: https://tmailor.com

Tmailor Privacy Policy