Privacy Notice
Last updated: October 2026. SpeedMail currently offers a live but developing temporary-email inbox and browser-based privacy tools. This notice describes the service's current behavior; it will be reviewed as features change.
What the current tools do
Password generation, password strength estimation and username suggestions run locally in your browser without intentionally uploading tool inputs to our server. QR codes (including a temporary inbox address QR) are rendered in the browser using JavaScript downloaded from a third-party CDN; that CDN can see request metadata such as your IP address. Inbox search filters already received messages in the browser. The optional new-mail sound plays locally only after you enable it; deleting an individual email requests permanent removal of that message from our inbox database.
Cookies, local storage and hosting
We store a light/dark preference in browser local storage. When the website automatically creates a temporary inbox, we set a Secure, HttpOnly, SameSite cookie containing a random session token so only your browser session can access its messages. We store a one-way hash of that token, not the plain token, in the inbox database. Cloudflare provides website hosting, incoming email routing, and database infrastructure and may process connection details such as IP addresses and security/request logs. For creation rate-limiting we store a time-limited hashed fingerprint derived from the requester IP address; we do not store the raw address in the inbox database for this purpose. Hosting logs may have separate retention periods.
Temporary inbox messages and expiry
When you create an inbox, we store its generated address, creation and expiry times, and a hashed browser-session token in Cloudflare D1. For received mail, we store the sender address, subject, text-only message content, a short preview, and timestamps. Attachments, rendered HTML and raw MIME are not retained in the inbox database. New inboxes initially last 60 minutes. You can renew the same address for 5, 30 or 60 minutes from the time you extend it, subject to a maximum of three hours since it was created. After expiry, inbox access is blocked; an automated cleanup normally deletes expired inboxes, messages, and rate-limit entries on an hourly schedule, so expired data may remain in storage briefly until the next cleanup. A new address deletes the previous inbox and its messages. Please do not use temporary inboxes for confidential, sensitive, or irreplaceable information.
Security and limitations
Temporary email is not end-to-end encrypted. Other email systems and senders may process messages before they reach SpeedMail. Browser extensions, compromised devices, screenshots and clipboard managers can expose information. Messages are displayed as plain text without remote HTML or attachment rendering. Email delivery cannot be guaranteed; other providers may reject disposable addresses.
Support and abuse reports
When you submit a support or abuse report, we store the issue category, your description, any related temporary address and optional reply email, plus creation time, status and an internal report reference in Cloudflare D1. We store a temporary hashed network fingerprint to limit submission abuse, not your raw IP address in the report table. Reports are not public and are intended for manual operator review. They expire after 30 days and are removed by scheduled cleanup; hosting-level logs may have separate retention. The form is not live chat and response times are not guaranteed. Do not submit passwords, OTPs or sensitive mail contents.
Advertising status
SpeedMail is not currently displaying or requesting Google AdSense advertisements. The previous demo advertisement previews have been removed. A Google AdSense verification meta tag and publisher ads.txt file may be present for ownership and authorization checks; these alone do not serve advertisements or record ad clicks. If third-party advertising is enabled later, this notice will be updated to explain advertising providers, data use and applicable consent requirements.
Changes and contact
SpeedMail is still being tested. This notice may be revised as infrastructure, analytics or advertising features change. An online Help & Report Abuse form is available, while a dedicated support email address and a final policy review are pending before broad promotion.