Guest records remain in browser localStorage by default, limited to 10 items. Server generation responses are marked no-store.
A temporary mailbox is activated only after you click a generated email. While active, the server temporarily stores its address and up to 10 messages after removing attachments and remote images. It is deleted when you leave, after about 45 seconds if the connection disappears, and never later than the displayed expiry.
Accounts store email, password hash, display name, session-revocation data, explicitly saved records, templates, folders, tags and API usage. Passwords, tokens and API keys are never stored in plain text.
We use first-party traffic analytics for public pages. We store the page path, visit time, approximate country, device category, traffic-source category and referring domain. Raw IP addresses and full referring URLs are not stored; visitor and session identifiers are salted hashes. Do Not Track and Global Privacy Control signals are respected, and private, admin, authentication and temporary-mail pages are excluded.
Security logs exclude full generated records, passwords, tokens, API keys and verification links. Abuse identifiers use salted IP hashes with retention controls.
You can export or delete saved records, sign out every device, erase all data and close the account from the dashboard.