fmail privacy

Last updated June 14, 2026

Privacy Policy

fmail provides disposable inboxes for short-lived email verification, testing, and spam avoidance. This policy explains what the website and API process, how that information is used, and what choices you have.

Information We Process

When email is sent to an fmail address, we process the message details needed to receive, display, and delete that email.

If you protect an inbox with a password, we process only what is needed to check access. We do not store the plain-text password.

Browser Storage

The web app may use browser storage to remember basic preferences and keep the inbox experience working smoothly.

Analytics

The website uses Google Analytics for aggregate site analytics. We do not use email message contents for analytics.

How We Use Information

  • Provide disposable inboxes, message viewing, deletion, and inbox locking.
  • Generate random addresses and list available domains.
  • Operate the website and API features requested by you.
  • Rate-limit sensitive actions, debug reliability issues, and keep the service stable.
  • Measure aggregate site usage and improve the service.

Sharing

We do not sell personal data, share message contents with advertisers, or use message contents for profiling. We use infrastructure providers, including Cloudflare for hosting, Workers, D1, assets, and email routing, and Google Analytics for site analytics. Those providers process data only as needed to run and measure the service.

Retention And Deletion

Messages are designed to expire automatically after about 12 hours and inboxes are capped at the latest 50 messages. You can also delete individual messages from the web app or API. Deleted or expired messages cannot be recovered through fmail.

Limited operational records may remain longer when needed to keep the service stable. Browser data can be cleared from your own browser settings.

Important Privacy Limits

Disposable inboxes are not suitable for banking, healthcare, government accounts, permanent accounts, private files, or sensitive secrets. Anyone who knows the same username and domain may be able to access an unprotected inbox. A protected inbox reduces casual access, but it should not be treated as secure long-term email.

Contact

For privacy, abuse, or support questions, contact us through Telegram.