Security
tempail.co is designed around a simple idea: the less we hold, the less there is to protect.
What we do not store
- Inbox sessions are saved in your browser. Email delivery and message storage are handled by Mail.tm; requests pass through our server.
- No accounts. There is nothing to sign up for and no profile to compromise.
- Optional first-party analytics requires opt-in and excludes inbox data. We use no advertising cookies or third-party analytics trackers. Read the privacy policy for storage and retention details.
Transport security
The site is served over HTTPS, and all canonical and social URLs use HTTPS. We enforce strict transport security and modern, restrictive HTTP headers, including a Content Security Policy, X-Content-Type-Options: nosniff, X-Frame-Options: SAMEORIGIN, a Referrer Policy, and a Permissions Policy that blocks camera, microphone and geolocation access.
Your session
Your inbox session is saved in your browser’s LocalStorage and can survive closing the tab. The browser sends its token to our server proxy when requesting messages from Mail.tm. Clearing this site’s browser data removes the local session; it does not guarantee deletion of provider-held account or message data.
Dependencies and limitations
Mail delivery and the storage of received messages are handled by Mail.tm, a third-party provider. This means your messages pass through and are held by that service. A temporary email is a convenience tool — it is not a secure channel for sensitive or legally binding information. Read our Transparency page for the full picture.
Reporting a vulnerability
Found a security issue? We take reports seriously. Please contact us through the contact page and include as much detail as you can.