Privacy Policy

1. Scope and definitions

This Privacy Policy applies to your access to and use of the temp77.com website ("the Service") and all features it provides. The Service is operated by its owner ("we", "us", "our"), who is the data controller for the personal data described in this policy.

For clarity, the following terms are used throughout: "Disposable inbox" refers to the one-time receive-only address automatically generated on the homepage; "Relay service" refers to the alias-creation and mail-forwarding feature accessed after login; "Real address" refers to the email address you use to log in and to receive forwarded mail; "Archive" refers to the 30-day online record the relay service keeps of each received message.

This policy does not govern third parties who send messages to your disposable address or alias — their privacy practices are governed by their own policies.

2. What data we process

We follow the principle of data minimisation: if a piece of information is not necessary to deliver the service, we do not collect it.

2.1 Disposable inbox

• Temporary address and access token: generated randomly by the server, not linked to any identity. The access token ensures only whoever holds the URL can open that inbox.
• Received messages: the body and headers (sender, subject, timestamp) of mail sent to the disposable address are stored temporarily to display in the inbox; file attachments are not stored. Everything is deleted with the address at expiry.

No registration, name, phone number, or identity of any kind is required to use the disposable inbox.

2.2 Relay service

• Real email address: the sole identity-bearing piece of data we collect — used to send login codes and to deliver forwarded messages.
• Login verification code: a 6-digit one-time code, valid for minutes, discarded after verification.
• Two-factor authentication key: generated only if you choose to enable 2FA, stored in encrypted form, used solely to validate one-time codes.
• Aliases and forwarding records: the list of aliases you have created, their forwarding counts and statuses, and the 30-day online archive of each message (body, attachments up to 50MB, delivery status).

2.3 Browser-side storage

We use browser localStorage — on your own device — to store three items: your language preference, the disposable inbox recovery token, and the relay service session token. See section 7 for details.

2.4 Server logs

Like virtually all web services, our servers log basic access information (timestamp, source IP, request path, status code) for security, abuse detection, and incident diagnosis. Logs are deleted on a rolling schedule and are never used for profiling or behavioural analysis.

3. Purposes and legal basis for processing

We process the data above for one purpose only: to deliver the service you have requested. Specifically:

• Receiving mail sent to your disposable address or alias, and displaying or forwarding it to you (necessary to perform the service);
• Sending login codes, maintaining sessions, and validating 2FA codes (necessary for account security);
• Automatically identifying and filtering spam (service quality and user experience);
• Rate-limiting abnormally high-volume requests and identifying abuse (legitimate interest in keeping the service secure and available).

We do not use any data for advertising, behavioural profiling, or marketing communications of any kind.

4. Retention periods

Each category of data is retained only as long as necessary. The system deletes data automatically on schedule — you do not need to take any action:

5. Storage and transmission security

We apply security measures appropriate to the nature of the service:

• HTTPS is enforced site-wide — all page loads and API calls are encrypted in transit;
• Each disposable inbox is isolated by a unique random access token — no token, no access;
• Relay accounts support optional 2FA; the 2FA key is stored encrypted;
• Internal access follows the principle of least privilege; message content is not used for any purpose beyond service delivery;
• Most fundamentally: short retention is itself a security measure — data that has been deleted cannot be breached.

6. Data sharing and disclosure

We do not sell or rent any user data. Data may be disclosed or transferred only in the following narrow circumstances:

• Legal obligation: if a competent authority issues a legally binding compulsory order we will, after verifying its validity, provide the minimum data required;
• Infrastructure providers: servers and basic infrastructure are hosted by industry-standard providers who supply computing and storage capacity only and have no right to use data for their own purposes;
• Business continuity: in the event of a merger or transfer of ownership, we will require the successor to remain bound by this policy and will give advance notice on the site.

Beyond the above, there is no third-party data sharing of any kind.

7. Cookies and browser storage

This site does not use any third-party cookies and does not load any analytics, advertising, or tracking scripts. Every script, stylesheet, font, and icon is self-hosted — when you visit Temp77, your browser makes no request to any external domain.

We store the following items in your browser's localStorage — all are necessary for the service to function:

You can clear these at any time via your browser settings without any consequence beyond those listed above.

8. Automated processing

The relay service includes one form of automated decision-making: an algorithm scores each incoming message for spam likelihood. Messages judged to be spam are not forwarded — they are archived with a flag and a visible reason. No human reads your messages during this process. If you believe a message was incorrectly flagged, click "Mark as not spam" in the detail view — the message is immediately reclassified and that sender will not be blocked again. This constitutes your direct channel to challenge the automated decision.

9. Your rights and how to exercise them

You have full control over your data:

• Access: your inbox, alias list, and 30-day archive are visible to you on the page at all times;
• Deletion: delete any message in your disposable inbox, swap to a new address (the old one is immediately invalidated), delete any alias, or delete or clear the archive;
• Restriction: pause any alias to stop all incoming mail and forwarding for that address;
• Withdrawal: log out, disable 2FA, or clear your browser's local storage at any time;
• Full account deletion: send a deletion request from your registered email address to support@temp77.com. We will delete all account data — your real address, all aliases, the entire archive, and the 2FA key — and confirm by reply. This is typically completed within 30 days of the request.

Exercising any of these rights is free of charge. If you believe our processing has infringed your rights, you may also raise a complaint using the same email address and we will investigate and respond.

10. Security incident response

In the event of an incident that may affect the security of your data, we will promptly assess the scope, take remedial action, and — where applicable law requires — notify affected users via the site or registered email address.

11. Minors

This service is designed for general internet users and is not directed at children under 16. We do not knowingly collect personal data from minors. If you are a guardian and believe a minor has provided us with personal data, please contact us and we will delete it promptly.

12. Policy updates

We may update this policy when features change or legal requirements evolve. Any update will be published on this page with a refreshed effective date. Material changes to how we process data will be highlighted prominently on the site. Continued use of the service after an update takes effect constitutes acceptance of the revised policy.

13. Contact

For any question about this policy, your data, or exercising your rights, please email support@temp77.com — the only official contact channel for this service. We take every message seriously. Usage rules are covered in the Terms of Service.