Privacy Policy

A guest session is identified by a signed token generated by our server and stored in your browser. The token identifies a browser, not a person. We do not ask for your name, your real email address or a password, and we have no way to connect a guest session to an identity.

A registered account additionally stores the email address you signed up with, a hash of your password, your plan and subscription state, and payment records where a payment has been made. We store a hash of your password and never the password itself.

Message bodies are stored so that you can read them, and are deleted when their retention window closes. HTML content is sanitised on arrival and remote images are rewritten to load through a proxy, so that opening a message does not report back to the sender or reveal your IP address.

Message content is not read by staff during ordinary operations or support. Access for the purpose of an abuse investigation requires a report reference, a recorded reason and elevated authorisation, and every access is written to an audit log.

Retention follows the plan in use: one hour for guest messages, three days on a free account, ninety days on Pro and one year on Business. Addresses expire on their own schedule and take their messages with them. Operational logs and abuse-prevention records are kept for a short, fixed period and then discarded.

We do not use advertising cookies or third-party tracking scripts. The session token is stored in your browser's local storage rather than a cookie, so it is not sent with every request for a font or an image. Aggregate usage statistics are collected in a way that does not identify individual visitors.

You may delete any address or message at any time, and deleting an address deletes its messages. Registered users may delete their account, which removes the account record along with the addresses and messages attached to it.

Under Vietnamese Decree 13/2023 on personal data protection, and under comparable rules elsewhere, you may request access to the personal data we hold about you and request its deletion. Requests are handled through the support address in the footer. For a guest session there is generally nothing to send, because there is no personal data to hold.

We use infrastructure providers for hosting, object storage and payment processing. They process data on our behalf under contract and do not receive message content except insofar as it is stored in object storage in the ordinary operation of the service. We do not sell data to anyone, which is not a promise so much as a description of a business model that does not involve it.