Privacy Policy

1. Information We Collect

Creating a mailbox requires no name, phone number, payment details, or account of any kind — you provide only the local-part (the text before the @) you want to use.

We do collect and store the content of messages delivered to a mailbox you create — sender address, subject line, and message body (plain text and HTML) — for as long as described in "Data Retention" below, so you can view your inbox.

Our hosting and network providers (Vercel, Cloudflare) automatically log standard request metadata for every visit — IP address, user-agent string, requested URL, and timestamp — the same way virtually every website's infrastructure does. This is infrastructure-level logging for security, abuse detection, and reliability; it is not joined with the contents of any mailbox in our application database.

2. How We Use Information

Message content is used only to display your inbox to whoever holds the mailbox's secret token. Request metadata from our hosting providers is used to detect abuse (for example, scripted mass-creation of mailboxes) and to keep the service reliable.

We do not use message content for advertising, profiling, or any purpose beyond operating the mailbox it was delivered to.

3. Advertising & Legal Basis

This site uses Google AdSense to display advertising. Google and its advertising partners may use cookies and similar technologies to serve ads, including based on your prior visits to this or other websites.

You may opt out of personalized advertising at any time by visiting Google's Ads Settings (adssettings.google.com), or by using the industry opt-outs at optout.aboutads.info and optout.networkadvertising.org.

Where applicable law (such as the EU/UK GDPR) requires consent before setting non-essential cookies, that consent is obtained or refused through the controls Google's advertising products present to you; declining does not block access to the service itself, only ad personalization.

Operating the mailbox you create is necessary to provide the service you asked for (a contractual/legitimate-interest basis); infrastructure logging is based on our legitimate interest in keeping the service secure and available.

4. Cookies & Local Storage

Advertising cookies: set by Google/AdSense as described above.

Local storage (not a cookie): the site saves the mailbox addresses and tokens you've created in your browser's localStorage, purely as a convenience so you don't have to retype them. This data never leaves your browser and is not visible to us — clearing your browser storage removes it permanently and is not recoverable from our side, since the token itself (not this local cache) is the only real credential.

You can block or clear cookies and local storage through your browser settings at any time; doing so may reduce ad relevance or require you to re-enter a mailbox token manually.

5. Data Retention

Message content is automatically and permanently deleted 7 days after it was received, by a scheduled job that runs daily. We do not keep backups of expired message content beyond this window.

The mailbox address itself, and the metadata needed to keep it working (creation date, current access token), are kept indefinitely so that addresses remain usable and reusable over time — this is a deliberate design choice ("never expires"), distinct from message content, which is short-lived.

6. Data Sharing & Sub-processors

We do not sell personal data, and we do not share message content with anyone except as needed to operate the service.

We rely on the following infrastructure providers, each of which processes data on our behalf under its own privacy and security terms: Cloudflare (receives inbound email and routes it to our systems), Supabase (hosts our database, where mailbox and message data is stored), Vercel (hosts the website and application code), and Google (serves advertising via AdSense).

These providers are not authorized to use the data they process for us for their own independent purposes.

7. Your Rights (GDPR / CCPA and similar laws)

Depending on where you live, you may have rights to access, correct, delete, or export data associated with a mailbox you created, and to object to or restrict certain processing. California residents have the right to opt out of the "sale" or "sharing" of personal information; we do not sell personal information, and AdSense's use of cookies can be limited using the opt-out links in "Advertising & Legal Basis" above.

Because the service has no accounts or login, we can only act on a request that identifies the specific mailbox address involved (we cannot look up data by name or email of a person, since we don't collect either). Send requests to mestech101@gmail.com; message deletion can also be accomplished simply by letting a mailbox's messages age past the 7-day retention window.

8. Children's Privacy

This service is not directed at children under 13 (or the relevant minimum age in your jurisdiction) and we do not knowingly collect data from them. If you believe a child has used the service, contact us at mestech101@gmail.com and we will take reasonable steps to remove the associated data.

9. International Data Transfers

Our infrastructure providers operate global networks, which means data may be processed or stored in countries other than your own, including the United States. Each provider maintains its own safeguards for cross-border transfers under applicable law.

10. Security

Access to a mailbox's contents requires its secret token, which is shown to you once at creation and never displayed again by us. Treat it like a password — anyone who has it can read that inbox.

No online service can guarantee absolute security. If you believe a mailbox or the service has been compromised, stop using that address and contact us at mestech101@gmail.com.

11. Changes to This Policy

This privacy policy may be updated from time to time; the "last updated" date above reflects the most recent revision. Continued use of the service after a change constitutes acceptance of the revised policy.