Privacy Policy

Mailfornet is operated by Mubarah Solutions LLC, 312 West 2nd Street, Casper, WY 82601, United States, which is the data controller for the personal data described here.

Mailfornet is designed to collect as little personal data as possible. This Privacy Policy explains what information we store, why we store it and how long we keep it. If you have any questions, please contact us.

1. What we store when you create an address

For addresses on our own domains ("Mailfornet" network), we store:

• The address itself and when it was created and expires.
• A secure access key that links the inbox to your browser. It is stored in a protected, non-reversible form.
• Your IP address and the name of its network (for example your mobile carrier, or a VPN or hosting company), to limit how many addresses one visitor or network can create and to stop abuse.
• A random browser ID, to count how many new addresses this browser has created in the current window. It is a random value made in your browser and says nothing about you.
• A device signature: a one-way hash of general device settings (screen size, processor and memory class, graphics chip, language and timezone), sent only when you create a free address, together with the time zone your device is set to. It is used only to enforce the free limit when browser data is cleared or a VPN is used. It cannot be turned back into those settings, and it is never used for advertising or tracking across sites.
• A bot check: when you create a free address, Cloudflare Turnstile checks in the background that the request comes from a real browser and not a script. Cloudflare processes your IP address and browser signals for this under its own privacy policy. Nothing is shown and no cookie is used for advertising.
• Emails sent to the address: sender, subject, body and attachment names.

2. How long we keep it

• Addresses and their emails are deleted automatically when the address expires, normally within a minute of the timer running out.
• Hourly rate-limit counters (which include IP addresses) are deleted after about two hours.
• Address-limit counters (which include IP addresses, browser IDs, device signature hashes and account numbers) are deleted within about two days of their window ending.
• We keep daily totals, such as how many addresses were created on a given day. These counts contain no addresses, IPs or message content.

Paid accounts

If you subscribe to a paid plan, we store your name, email address, country (optional), a securely protected password, your plan details and billing history. We never store full card numbers — only the card brand and last four digits of each payment. Emails received by your permanent addresses are kept until you delete them or the address, up to your plan's per-address storage limit. When that limit is reached, the oldest messages are removed first.

3. What stays in your browser

Your "My addresses" list, the access keys for your inboxes and your preferences are saved in your browser's local storage. They never leave your device unless you're using an inbox. The random browser ID is kept there too, and in a first-party cookie, and is sent only when you create an address. You can remove them at any time by deleting an address or clearing your browser data.

Advertising. We use Google AdSense to show ads on some pages. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and/or other sites on the Internet. You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of some third-party vendors' use of cookies at aboutads.info. Learn more in how Google uses information from sites that use its services. Visitors in the European Economic Area, the UK and Switzerland are asked for consent before personalised ads are shown. Ads never see the contents of your inbox.

We use Google Analytics to understand how visitors use our website, such as which pages are viewed and how people arrive at the site. Google Analytics may set cookies and collect information such as your approximate location, device and browser type. It never has access to the contents of your inbox. You can opt out using Google's Analytics opt-out browser add-on.

4. The Gmail alias generator

The alias generator runs entirely in your browser. The Gmail address you type is not sent to us or anyone else.

5. Third parties involved

• Infrastructure providers. We use trusted, industry-leading hosting and email infrastructure providers to operate the service. They process data only on our behalf and under strict data protection terms.
• External networks. If you select an external network offered on the site, that inbox is created and stored by the external provider under its own policies. Those inboxes may be publicly accessible.
• Payment providers. Payments for paid plans are processed by third-party payment providers. Your card details are entered on their systems and never pass through ours — we only receive confirmation of the payment, the card brand and the last four digits. Each provider handles that data under its own privacy policy.
• Font delivery. Fonts on this site are served by a third-party font provider, so your browser connects to its servers when a page loads.

We do not sell or rent personal data to anyone.

6. Emails you receive

We don't read your messages or use them for advertising. Messages may be processed automatically to display them and to enforce limits, such as how many emails an inbox can hold. We may look at specific messages only when investigating a report of abuse or when legally required to.

7. Legal requests

Because we delete data so quickly, there's usually nothing left to hand over. If we receive a valid legal request for data we still hold, we'll comply with the law.

8. Children

Mailfornet isn't aimed at children under 13, and we don't knowingly collect information about them.

9. Your rights

You can ask us to show you the personal data we hold about you, correct it, or delete it. Most of this you can do yourself at any time: delete an address to remove it and its messages, or close your plan from your account to erase all of your addresses and saved mail.

Depending on where you live, you may also have the right to object to or restrict how we use your data, to receive a copy of it in a portable format, and to complain to your local data protection authority. To make any of these requests, contact us from the email address on your account. We answer within 30 days and never charge for it.

Billing records are kept for as long as tax and accounting law requires, even after an account is closed.

10. Changes to this policy

If we change how we handle data, we'll update this page and the date at the top. Significant changes will be noted on the homepage.