TempPrivacy Policy
1. Who Is the Data Controller
The Service is operated under the domain tempmail.savemanager.site. For privacy-related enquiries, contact: savemanager70@gmail.com.
2. What Data We Collect
2.1 Data you provide
You provide no personal data to use the Service. No name, personal email address, password, or payment information is collected at any point.
2.2 Data generated automatically
| Data item | Why we collect it | How long we keep it |
|---|---|---|
| SHA-256 hash of your IP address | Rate limiting — to enforce the maximum of 10 address creations per IP per hour. The hash is one-way; we cannot reverse it to your actual IP. | Deleted with the address record, maximum 60 minutes |
| Randomly generated disposable email address | Required to route inbound email to your inbox | Deleted at address expiry (max 60 minutes) |
| SHA-256 hash of your bearer token | Authentication — to verify you are the owner of the inbox when you call the API | Deleted at address expiry (max 60 minutes) |
| Inbound email messages (sender, subject, body) | To display your inbox | Deleted at address expiry (max 60 minutes), or earlier if you delete them manually |
| Cloudflare infrastructure logs | Operated by Cloudflare under their own privacy policy. May include IP addresses, request timestamps, and HTTP metadata for security and performance purposes. | Per Cloudflare's retention policy |
3. What We Do Not Collect
- We do not set any tracking cookies.
- We do not use third-party analytics (no Google Analytics, Mixpanel, etc.).
- We do not sell, rent, or share any data with third parties for marketing.
- We do not read or analyse the content of received emails except to store and display them to the token holder.
- We do not retain any data after address expiry.
4. Local Storage
The web application stores two items in your browser's localStorage:
- tm_session – contains your disposable address, bearer token, and expiry timestamp. This stays only in your browser and is never sent to any server except as an Authorization header when you use the app.
- tm_read – a list of message IDs you have already read, used to show unread indicators. Contains no personal data.
These items are not cookies and are not accessible to any third party. You can clear them at any time via your browser settings.
5. Infrastructure and Sub-processors
The Service runs entirely on Cloudflare's infrastructure, including:
- Cloudflare Workers – serverless compute for the API
- Cloudflare D1 – SQLite database for addresses and messages
- Cloudflare Email Routing – receives inbound SMTP and delivers to the Worker
- Cloudflare Assets – serves the static website
Cloudflare is the sole sub-processor. Their privacy policy is available at cloudflare.com/privacypolicy.
6. Data Retention and Deletion
All data associated with a disposable address is automatically deleted when the address expires (maximum 60 minutes after creation). A scheduled cleanup job runs every 10 minutes and permanently removes all expired records. There is no backup and no recovery.
You can also delete your address and all its messages at any time by clicking "New address" in the app, or by calling DELETE /address via the API.
7. Security
All traffic between your browser and the Service is encrypted in transit using TLS (HTTPS). Bearer tokens are never stored in plain text; only their SHA-256 hash is kept in the database. IP addresses are similarly hashed before storage.
8. Children's Privacy
The Service is not directed to children under 13 years of age. We do not knowingly collect data from children. If you believe a child has used the Service in a harmful way, contact us at savemanager70@gmail.com.
9. Your Rights
Because we store no personal data linked to an identity, most data-subject rights (access, rectification, portability) are not applicable in the traditional sense — we have no way to associate stored data with a specific person beyond the current browser session. If you have concerns, email us at savemanager70@gmail.com and we will respond within 30 days.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available at this URL with an updated effective date. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact
For privacy questions or abuse reports: savemanager70@gmail.com.