Privacy Policy - TempBox | Data Protection

Our Privacy Commitment

TempBox is built on a zero-knowledge architecture. We fundamentally believe that the best way to protect your privacy is to never have access to your data in the first place.

This privacy policy outlines our practices, but the core principle is simple: we don't collect, store, or track personal information. Period.

What We Don't Collect

No Personal Information

We don't ask for names, email addresses, phone numbers, or any identifying information.

No IP Address Logging

We don't log IP addresses or track your location.

No Tracking or Analytics

No cookies, no tracking pixels, no third-party analytics.

No Email Content Access

Your emails are encrypted. Even we cannot read them.

What We Do Collect

To provide our service, we temporarily store:

• Temporary email addresses: Generated addresses stored only during their active lifetime (default 30 minutes).
• Received emails: Encrypted emails stored temporarily and automatically deleted after expiration.
• Session data: Minimal technical data to maintain your session, cleared when you close the browser.

Important: All data is automatically and permanently deleted after your temporary email expires. No backups, no archives, no recovery.

Data Security

We implement enterprise-grade security measures including:

• End-to-end encryption for all email content
• Encrypted storage at rest using AES-256
• TLS encryption for all data in transit
• Regular security audits and penetration testing
• Isolated infrastructure with no third-party access

Third-Party Services

We do not use third-party analytics, advertising networks, or tracking services. Our infrastructure is self-hosted and fully controlled by us. We never share, sell, or transfer any data to third parties.

Your Rights

Since we don't collect personal data, traditional data rights (access, deletion, portability) don't apply. However, you maintain complete control:

• Your temporary inbox is accessible only through your unique link
• You can close your session at any time
• All data is automatically deleted after expiration
• No account means no data trail

Legal Compliance

TempBox is designed to comply with GDPR, CCPA, and other privacy regulations. Our zero-knowledge architecture means we cannot provide user data to law enforcement or government agencies—because we don't have any.

We may be required to comply with valid legal process, but our technical architecture limits what we can provide to metadata about service usage, not user content or identifying information.

Children's Privacy

TempBox does not knowingly collect information from children under 13. Since we don't collect personal information from anyone, this protection is inherent to our service design.

Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Questions About Privacy?

If you have questions about this privacy policy or our practices, please contact us.