Addresses and messages exist only for short-term receiving and enter the cleanup process when they expire or are replaced.
Effective date: August 28, 2026
Privacy Policy
This policy explains what data SendTmp processes when providing disposable inboxes, email alias forwarding, and 30-day storage, why we process it, how long we retain it, and how you can submit a request.
Your login email is used for delivery; forwarding records are retained for up to 30 days so you can review and retry them.
We do not sell personal information or use message content to build advertising profiles.
Submit access, correction, or deletion requests to support@sendtmp.com.
1. Scope and data controller
This policy applies to the disposable email and alias forwarding services provided by SendTmp on sendtmp.com. When you visit other websites or click links in external emails, the relevant third party’s policy applies.
SendTmp is the data controller for this service. For privacy, deletion, or security questions, contact us at support@sendtmp.com.
2. Data processed for disposable email
When you create a disposable mailbox, the service generates a random address, access token, creation time, and expiration time. When messages arrive, we process the sender, subject, delivery time, and body so they can be displayed in your current browser.
A disposable mailbox does not require your name or real email address. Attachments are not retained in the disposable inbox, and messages exceeding the service limit may be rejected.
3. Data processed for email forwarding
When you use forwarding, we process your login email, the alias prefix you create, its enabled status, and creation time. Incoming messages must pass through our system to reach your login email, so we process the necessary envelope information and message body.
The dashboard shows each alias’s forwarding count and status. After you pause an alias, new messages are no longer forwarded; after you delete it, the address is no longer an active point of contact for you.
4. Login codes and two-step verification
Login uses a short-lived code sent to your real email address. We process the destination email, sending time, verification result, and security rate-limit records. Codes are used only to verify your identity and are not stored as long-term passwords.
When two-step verification is enabled, the system generates a TOTP secret and verifies a one-time code. Keep your authenticator secure, and do not share the QR code or secret with anyone else.
5. Technical logs and security
To prevent abuse, troubleshoot problems, and enforce rate limits, we may record IP addresses, timestamps, request paths, response statuses, and basic device information. Logs are not used for cross-site advertising tracking.
Access controls, encryption in transit, and least-privilege permissions help reduce the risk of unauthorized access. No internet service can promise absolute security, so we continuously adjust safeguards based on risk.
| Data category | Primary purpose | Typical retention |
|---|---|---|
| Disposable addresses and messages | Display incoming messages and maintain the active period | Cleaned up when the mailbox expires or is replaced |
| Login email and aliases | Authentication, forwarding, and account management | While the account is in use or until deletion is requested |
| Forwarded message storage | Viewing, downloading, retrying, and marking as spam | Up to 30 days |
| Security logs | Rate limiting, abuse prevention, and troubleshooting | Retained only as long as necessary for security and operations |
6. Retention and deletion
Disposable mailboxes operate until the expiration time shown on the page; changing your address starts a new mailbox period. Expired data enters an automatic cleanup process. Do not use a disposable address as a long-term recovery credential.
Forwarded messages are displayed for up to 30 days and may be removed sooner at your request or for security reasons. Necessary records may be retained longer when required by law, for dispute resolution, or to prevent abuse.
7. Legal bases for processing
We process addresses, messages, and authentication information to provide services you actively request. To protect the service and users, we also rely on legitimate interests to enforce rate limits, detect abuse, and retain necessary logs.
Where the law requires consent, we will provide a clear choice. You may stop using the service or contact support to withdraw consent where withdrawal is available, but this does not affect lawful processing carried out before withdrawal.
9. International data transfers
Our infrastructure and service providers may be located outside your region, so data may be processed across borders. We use contractual and security measures required by applicable law to protect these transfers.
Rules may differ between jurisdictions, but this does not reduce the purpose limitations promised by this policy. Contact support if you need information about arrangements for a specific region.
10. Your choices and rights
Where permitted by applicable law, you may request access to, correction of, deletion of, or restriction of processing for your personal data, or request a copy of it. We may ask you to verify your connection to the account so we do not disclose information to an unrelated person.
When a disposable mailbox is not linked to an identity, we may be unable to confirm the requester’s identity using the address alone. The most direct way to control the data is to stop using the mailbox, change the address, or wait for it to expire.
11. Children
The service is not intended for children below the local age of digital consent and is not designed to intentionally collect children’s information. If a guardian believes a minor has submitted personal information, contact us so we can investigate and delete it.
Users must not use disposable addresses to bypass protections intended for minors. If we discover such abuse, we may restrict access and retain necessary security records.
12. Policy updates and contact
We will update this policy and change the effective date when our product, regulations, or processing practices change. We will communicate significant changes in a manner suited to the service; please review this policy again before continuing to use it.
Send privacy questions, complaints, or rights requests to support@sendtmp.com. Describe the relevant feature and scope of your request, and do not send login codes or two-step verification secrets by email.