Privacy Policy
We built Mailfornet to collect as little as possible. This page explains what we do store, why, and for how long. If anything here is unclear, ask us.
1. What we store when you create an address
For addresses on our own domains ("Mailfornet" network), we store:
- The address itself and when it was created and expires.
- A hashed access token. The actual token stays in your browser. We only keep a one-way hash to check it.
- Your IP address, to limit how many addresses one visitor can create per hour and to stop abuse.
- Emails sent to the address: sender, subject, body and attachment names.
2. How long we keep it
- Addresses and their emails are deleted automatically when the address expires, normally within a minute of the timer running out.
- Hourly rate-limit counters (which include IP addresses) are deleted after about two hours.
- We keep daily totals, such as how many addresses were created on a given day. These counts contain no addresses, IPs or message content.
Paid accounts
If you sign up for a paid plan we store your name, email address, optional country, a securely hashed password, your plan and billing history. We never store full card numbers — only the card brand and last four digits of each payment. Emails received by your permanent addresses are kept until you delete them or the address.
3. What stays in your browser
The "My addresses" list, the access tokens for your inboxes, and your last chosen network are saved in your browser's local storage. They never leave your device unless you're using an inbox. You can remove them at any time by deleting an address or clearing your browser data.
We don't use advertising cookies or tracking pixels, and we don't run third-party analytics.
4. The Gmail alias generator
The alias generator runs entirely in your browser. The Gmail address you type is not sent to us or anyone else.
5. Third parties involved
- Cloudflare receives mail for our domains and hosts the inbox service. Their privacy policy applies to the infrastructure they operate.
- External networks. If you pick Guerrilla Mail, Mail.tm or Mail.gw, that inbox is created and stored by that service, under their own policies. Those inboxes may be publicly accessible.
- Google Fonts serves the fonts used on this site, which means your browser connects to Google's servers when a page loads.
We don't sell or rent data to anyone.
6. Emails you receive
We don't read your messages or use them for advertising. Messages may be processed automatically to display them and to enforce limits, such as how many emails an inbox can hold. We may look at specific messages only when investigating a report of abuse or when legally required to.
7. Legal requests
Because we delete data so quickly, there's usually nothing left to hand over. If we receive a valid legal request for data we still hold, we'll comply with the law.
8. Children
Mailfornet isn't aimed at children under 13, and we don't knowingly collect information about them.
9. Changes to this policy
If we change how we handle data, we'll update this page and the date at the top. Significant changes will be noted on the homepage.