Privacy Policy
Last Updated: March 18, 2026
At Phantom Mail, we believe privacy is a fundamental right. We're committed to protecting your anonymity and minimizing data collection. This policy explains what minimal data we collect, how we use it solely for service delivery, and your rights.
🔒 Our Privacy Commitment:
We do not track your activity, we do not monitor what you do with our service, and we do not share your data with anyone. We cannot and will not report your activities to authorities or third parties. Your privacy is your own.
1. Data We Collect
1.1 Temporary Email Addresses
When you generate a temporary email address through our service, we collect and store:
- Email Address: The temporary email address you generated
- Email Content: The emails received at your temporary address
- Retention Period: Free users: 1 hour / Premium users: 30 days
1.2 User Account Data (Optional)
If you create an account or use Premium features, we collect:
- Username: Your chosen username
- Password: Encrypted and hashed - we cannot see your password
- Email (Optional): Only if you provide it - used for account purposes only
- Premium Status: Whether you have an active Premium subscription
- Saved Addresses: Custom email addresses you've created (Premium only)
- Forwarding Rules: Email forwarding preferences (Premium only)
1.3 Technical Data
We automatically collect certain technical information via Cloudflare infrastructure:
- IP Address: Logged by Cloudflare for security and rate-limiting purposes
- Browser Information: User agent, browser type, and device information
- Access Logs: Pages visited, timestamps, and referrer information
- API Usage: For Developer API users, request counts for rate limiting
2. How We Use Your Data
We use the minimal data we collect exclusively for these purposes:
- Service Delivery: To provide temporary email services and deliver emails to you
- Account Management: To manage your account and Premium subscription
- Security: To prevent abuse and spam - we protect our service, not monitor your usage
- Rate Limiting: To enforce API rate limits (100/day free, 10,000/day Premium)
What we DON'T do: We do not track your browsing behavior, monitor your email content, analyze your usage patterns for advertising, or share any data with third parties for marketing or law enforcement purposes.
3. Data Retention
- Free Temporary Emails: Automatically deleted after 1 hour
- Premium Saved Emails: Retained for 30 days, then automatically deleted
- Permanent Addresses: Retained as long as your Premium account is active
- Account Data: Retained until you delete your account
- Technical Logs: Cloudflare logs are retained according to their data retention policies
4. Third Parties
We respect your privacy and do not sell, rent, or share your personal data with anyone - not for marketing, not for law enforcement, not for any purpose. The only third-party service we use is:
- Cloudflare: Our infrastructure provider for hosting, email routing, and CDN services. All data is processed on Cloudflare's edge network. We chose Cloudflare because they respect user privacy. See Cloudflare's Privacy Policy.
Important: We have no ability to monitor your specific usage or share your information with authorities. We cannot see what you're doing with our service - by design.
5. Data Security
We implement industry-standard security measures to protect your data:
- Encryption: All data is encrypted in transit (HTTPS/TLS)
- Password Hashing: Passwords are hashed using strong cryptographic algorithms
- Access Control: Strict access controls on our infrastructure
- Automatic Deletion: Temporary data is automatically purged according to retention policies
6. Your Rights
You have the following rights regarding your data:
- Access: View your account data through your profile page
- Deletion: Delete your account and all associated data at any time
- Correction: Update your account information as needed
- Data Export: Request a copy of your data by contacting us
7. Cookies
We believe in transparency. Here's what we use for essential functionality:
- Session Storage: localStorage to keep you logged in during your session
- No Tracking Cookies: We do not use any tracking, advertising, or analytics cookies
- No Third-Party Trackers: We do not embed any third-party tracking scripts or pixels
8. Children's Privacy
Our service is not intended for users under 13 years of age. We do not knowingly collect data from children under 13.
9. International Data Transfers
Your data is stored on Cloudflare's global network and may be processed in multiple countries. By using our service, you consent to this transfer and processing.
10. Changes to This Policy
We may update this privacy policy from time to time. The "Last Updated" date at the top of this page indicates when the policy was last revised. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or your data, contact us:
← Back to Home