Privacy Policy
Last updated: February 21, 2026
1. Information We Collect
ExpressMail is designed to protect your privacy. We collect minimal information necessary to provide our service:
- Device identifier — a randomly generated ID stored on your device to associate your mailboxes with your session.
- Email content — emails received at your temporary addresses are stored temporarily until the mailbox expires.
- Push notification tokens — if you opt in to notifications, we store your device token to deliver alerts.
We do not collect your name, real email address, phone number, or any other personally identifiable information.
2. How We Use Your Information
- To create and manage temporary email mailboxes.
- To receive and display incoming emails and attachments.
- To sync your mailboxes across devices when you log in.
- To send push notifications about new emails (if enabled).
3. Data Retention
Mailboxes and their associated emails are automatically deleted after the mailbox expires (default: 30 days). Attachments are stored temporarily and cleaned up on a regular basis. Once data is deleted, it cannot be recovered.
4. Data Sharing
We do not sell, trade, or share your data with third parties. We do not use your data for advertising or analytics profiling.
5. Third-Party Services
We use the following third-party services:
- RevenueCat — for managing premium subscriptions. RevenueCat processes purchase data from Apple and Google. See their privacy policy.
- Firebase — for push notifications and analytics. See Google's privacy policy.
6. Browser Extensions
Our browser extensions (Chrome, Firefox) access your ExpressMail account by reading authentication cookies scoped to expressmail.app. The extensions store mailbox data locally on your device for faster loading and communicate with our API over HTTPS to manage mailboxes and emails.
The extensions do not collect browsing history, track your activity on other websites, or transmit any data beyond what is required to provide the disposable email and autofill functionality.
Google API Limited Use Disclosure — ExpressMail's use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
7. Security
We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS) and secure database access. However, no method of electronic transmission or storage is 100% secure.
8. Children's Privacy
ExpressMail is not intended for use by children under the age of 13. We do not knowingly collect information from children under 13.
9. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the revised policy.
10. Contact
If you have questions about this privacy policy, contact us at [email protected].