- Who Operates This Service
- MailGenerator.net is operated by Aleksanteri Nikkanen, a private individual based in Outokumpu, Finland. For anything related to this policy, reach us at support@mailgenerator.net.
- Not for Sensitive Use
- This service is designed for non-sensitive, disposable email use only. It does not provide encryption at rest, end-to-end encryption, or any guarantees of confidentiality beyond basic security measures. You must not use it to send, receive, or store sensitive, confidential, or personally identifiable information. By using the service, you acknowledge and accept this limitation.
- Information We Collect From You
- When you create an inbox, we store the email prefix you choose, your password as a one-way bcrypt hash (we never see or store the actual password), and timestamps for when the account was created and last used. While you're signed in we set a session cookie to keep you logged in, and we briefly process your IP address to enforce rate limits and stop abuse such as mass account creation.
- Information From People Who Email You
- When someone sends a message to your temporary address, we store the sender's email address, the subject line, and the plain-text body so we can deliver it to your inbox - attachments and embedded images are stripped and never stored. This means senders, who may never have visited our site themselves, also have their information processed by us, solely to get their message to you.
- Why We Process Your Data
- We process your account data to provide the service you signed up for and to keep it secure and free of abuse. We process a sender's information based on our legitimate interest in delivering the message they chose to send to your address. We never use your inbox or message content for advertising, profiling, or anything beyond running the service - see "Advertising & Third-Party Cookies" below for how general on-site advertising, if any, is handled separately.
- Data Retention & Deletion
- Inboxes including all of their messages are automatically and permanently deleted after over 1 year without any activity - logging in or checking your inbox keeps it active. Separately, individual messages are automatically and permanently deleted once they reach 7 days old, regardless of inbox activity. Inboxes on a domain that's being retired are also permanently deleted once that domain expires, regardless of how active the inbox otherwise is - see "Domain Expiration & Account Termination" below. You can also permanently delete your whole inbox, or just a single message, at any time from the inbox screen, with immediate effect.
- Domain Expiration & Account Termination
- Email domains used by the service are rotated periodically. If the domain your inbox uses expires, we reserve the right to terminate affected accounts without further notice. Where possible, a warning will be displayed in the inbox prior to termination.
- Service Availability & Disclaimer of Warranty
- MailGenerator.net is provided "as is" and "as available," free of charge, without any warranty of any kind - express or implied - including as to uptime, uninterrupted availability, accuracy, or fitness for a particular purpose. We do not guarantee the service will be error-free or free of downtime or data loss. You use the service entirely at your own risk, and to the fullest extent permitted by applicable law, we accept no liability for any damages or losses arising from your use of, or inability to use, the service - including outages or downtime.
- Account Suspension & Termination
- In addition to the automatic 1-year inactivity deletion, the 7-day message deletion, and domain-expiration terminations described above, we may suspend, restrict, or permanently delete any inbox at any time and without prior notice - for example due to suspected abuse, illegal use, a violation of these terms, technical necessity, or at our sole discretion.
- Cookies
- We use one essential session cookie to keep you logged in and a hidden token that protects your account from cross-site request forgery. Both are strictly necessary for the service to work and require no consent. If this site shows advertising (see below), non-essential cookies used for ad personalization or measurement are only set with your prior consent, collected through a certified consent management tool - you can change your choice anytime via "Cookie Settings" in the footer.
- Advertising & Third-Party Cookies
- This site may show advertising, for example through Google AdSense, to help keep it free. When it does, Google and any other advertising partners we use may set cookies on your device to personalize ads, measure their performance, and prevent fraud, processing data such as your IP address, device and browser details, and site-visit behaviour. This only happens with your consent, collected via the consent tool mentioned above, and never extends to the content of your inbox or emails.
- Your Advertising Choices
- You can manage or withdraw ad-related consent anytime via "Cookie Settings" in the footer, adjust Google's ad personalization directly at adssettings.google.com, or opt out more broadly via youronlinechoices.eu (EU) or aboutads.info/choices (US). In Finland, cookie-consent practices are overseen by Traficom (the Finnish Transport and Communications Agency), separately from the data-protection matters described under "Your Rights" below.
- Saved Logins in Your Browser
- When you create an account, your email address and password are stored in your browser's local storage on your own device. This never reaches our servers, but anyone with access to that browser - e.g. on a shared or public computer - could see it in plain text. Avoid this feature on shared devices, or clear your browser data afterwards.
- Data Security
- Passwords are stored only as bcrypt hashes, all database queries use parameterised statements, and every action that changes your account is protected against cross-site request forgery. As the operator, we retain the technical ability to access stored messages directly on our server for maintenance, security, and abuse-prevention purposes, but we don't read your mail as a matter of course.
- Sharing & International Transfers
- We don't sell or rent your personal data. Our hosting and mail-server providers process data on our behalf purely to keep the service running, and, if we show advertising, our advertising partners (such as Google) process certain data - like cookie identifiers and IP address - for ad delivery and measurement under their own privacy policies. We aim to keep processing within the EU/EEA; if we or our partners ever rely on a provider outside it, appropriate safeguards, such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses, will be in place. We may also disclose information where required by law.
- Children's Privacy
- This service isn't directed at, or intended for, anyone under 16. If you're under 16, please don't use it. If you believe a child has created an inbox, contact us and we'll delete it.
- Your Rights
- Under the GDPR you can ask us to access, correct, restrict, or erase your data, object to our processing, or give you a portable copy of it - email support@mailgenerator.net for any of these (erasure is also instant and self-service - see "Data Retention & Deletion" above).
- Changes to This Policy
- We may update this policy from time to time. Continuing to use the service after a change means you accept the update.