Privacy Policy

Short version: nullmail stores no personal data. No accounts, no names, no cookies for tracking. Messages live only until the inbox expires, then are hard-deleted. Inboxes are public-by-address, treat them like postcards.

What we collect

• Messages sent to temporary addresses, stored until inbox expiry (default ~60 minutes, extendable), then permanently purged.
• IP addresses, kept only in short-lived abuse logs for rate limiting and incident response, then deleted.
• No accounts, no PII, no tracking cookies. The site works with storage and cookies disabled. We never build a profile of you, because there is nothing to profile.

Lawful basis & purpose limitation (GDPR)

Processing is based on legitimate interest in providing the requested service and preventing abuse (GDPR Art. 6(1)(f)). We do not profile users, do not sell or share inbox contents, and do not use message data for advertising. Data minimisation is architectural: we cannot leak what we do not store.

Retention

Messages: deleted at inbox expiry (hard delete, no recovery). Abuse logs: deleted on a short rolling window. Backups roll off within 30 days at most.

Your rights

Under GDPR/UK GDPR you have rights of access, erasure, and objection. Because we hold no PII tied to you, there is generally nothing to fulfill, but if you believe data concerning you is stored in a specific inbox, contact us via the abuse-report page and we will purge it promptly.

About ads

Ads keep nullmail free. When ads are enabled they are clearly separated from content, never forced between you and your inbox, and never matched to your identity. We do not sell, share, or profit from inbox contents, and we do not place tracking cookies. If you use an ad blocker, the site works exactly the same.

Public-by-address model

Anyone who knows a temporary address can read that inbox. Do not use the Service for confidential communications. This model is the product; if you need confidentiality, use a private mailbox.

Contact

Abuse reports, takedown requests, and privacy questions: use the abuse report page.

Last updated: 2026-09-02