Legal
Privacy Policy
How 10 Minute Temp Email handles mailbox data, cookies, analytics, advertising, and consent.
Last updated: August 25, 2026
This page is informational and is not legal advice.
1. Who we are
10 Minute Temp Email (“we”, “us”, “our”) provides a receive-only disposable inbox at 10mintempemail.com. This Privacy Policy explains what information we process when you use the site and related services.
2. Information we process
Temporary email storage
- Short-lived mailbox metadata (for example local-part identifiers, status, and expiry time) stored in Cloudflare D1 while the mailbox is active.
- Temporary message content and allowed attachments stored in a private Cloudflare R2 bucket while the mailbox is active.
- Mailboxes last 10 minutes. After expiry or deletion, related mailbox data is scheduled for deletion and cannot be recovered.
Session cookies and security data
- An essential HttpOnly session cookie proves mailbox ownership. The raw token is not stored in the database—only an HMAC hash is retained while the mailbox is active.
- Connecting IP addresses are not stored in raw form. When rate limiting requires an identifier, an HMAC of the IP may be stored temporarily and then deleted with other short-lived operational data.
- Cloudflare Turnstile may be used to reduce automated mailbox creation. See Cloudflare’s privacy documentation for Turnstile details.
What we do not intentionally log
We do not intentionally keep long-term logs of email addresses, subjects, bodies, session tokens, Turnstile tokens, or raw IP addresses beyond what is required to operate and secure the service.
3. Google Analytics
We use Google Analytics (gtag.js, measurement ID G-N10HE8P7T0) to collect aggregated information about how visitors use the site, such as pages viewed and approximate location. Google may process this data as described in the Google Privacy Policy.
Analytics cookies are non-essential. For visitors in the EEA, UK, and Switzerland, Google Analytics storage defaults to denied until consent is granted through the consent tools described below. You can also control personalized ads via Google Ads Settings.
4. Google AdSense and advertising
To keep the service free, we may display advertisements served by Google AdSense. Ads are labeled and are never required to create a mailbox or read a message. When ads are enabled, they are limited to the homepage (kept away from mailbox controls) and original articles. They are not placed on legal pages, contact or abuse forms, or API responses.
- Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.
- Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.
- Users may opt out of personalized advertising by visiting Google Ads Settings. You can also visit www.aboutads.info/choices to opt out of some third-party vendors’ use of cookies for personalized advertising.
Google may use cookies (such as advertising / DoubleClick cookies) and similar technologies, including web beacons, to collect information about your visits to this and other websites in order to provide advertisements. Learn more in Google’s Advertising Technologies and the Google Privacy Policy.
If additional third-party vendors or ad networks serve ads on this site, we will identify them here or in our Cookie Policy and provide links to their opt-out information where available.
5. Cookies and similar technologies
We and our partners use cookies and similar technologies for:
- Essential operation — mailbox session ownership and security.
- Abuse prevention — human verification (Turnstile) and rate limiting.
- Analytics — Google Analytics to measure traffic and improve the site.
- Advertising — showing and measuring ads, including personalized ads where permitted.
For a fuller breakdown of cookie categories and controls, see our Cookie Policy.
6. Consent (EEA, UK, and Switzerland)
We implement Google Consent Mode v2 so Google Analytics and advertising tags can respect consent before storing applicable advertising or analytics cookies.
For visitors in the EEA, United Kingdom, and Switzerland, advertising and analytics storage defaults to denied. Essential cookies needed to run the inbox (such as the mailbox session cookie) still work.
When Google AdSense is enabled, consent is collected with a Google-certified consent management platform through Google AdSense Privacy & messaging (Funding Choices). That CMP can update Consent Mode based on your choice. Until a certified CMP message is active, those regions keep the denied advertising/analytics defaults.
You can also clear site cookies in your browser and use the opt-out links in this policy.
7. Children’s privacy
The service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.
8. Data retention
- Mailbox and message data are temporary by design. They are deleted after the 10-minute expiry or after you delete the mailbox. There is no mailbox recovery.
- IP HMAC / rate-limit records are kept only as long as needed to prevent abuse, then removed with other short-lived operational data.
- Google Analytics and Google AdSense may retain information according to Google’s own policies. We do not control those retention periods.
9. Your choices
- Delete an active mailbox from the inbox controls.
- Use the consent message, where shown, to accept or reject non-essential cookies.
- Clear site cookies via your browser settings.
- Manage Google personalized ads via Ads Settings.
- Use industry opt-out tools such as aboutads.info/choices.
10. Contact
For privacy questions, abuse reports, and general inquiries, email info@10mintempemail.com. You can also use the Report abuse page for abuse-related reports.
11. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when revisions are published.