Is TTMAIL temporary email completely free?

Yes, TTMAIL is 100% free forever with no hidden subscriptions, no registration required, and unlimited disposable email addresses.

Can I receive OTP and verification codes with TTMAIL?

Yes, TTMAIL receives real-time OTPs and verification codes instantly from any website, app, or service within seconds.

How long do emails stay in my temporary inbox?

Emails and mailboxes remain active for 90 days, after which they are automatically deleted to protect your privacy.

Can I create a custom email address or alias?

Yes, you can choose any custom name and alias for your temporary email address. TTMAIL also supports multiple domains.

Does TTMAIL work on mobile and desktop?

Yes, TTMAIL works on all devices including mobile, tablet, and desktop. You can sync your mailboxes across devices using a password.

Privacy Policy | TTMAIL - Temporary Email & Temp Phone Number Service

We are absolutely brutal about your privacy. We do not want your data, we do not want to store your data, and we delete it automatically. Read our extensive privacy commitments below.

1. Information Collection & Use

When you use TTMAIL, you are using a service designed for absolute anonymity. We do not require you to register, provide your real email address, phone number, or any identifying personal information. The only information we temporarily process is the incoming emails directed to the random or custom aliases you generate.

If you choose to set a custom password to access your temporary email across multiple devices, that password is computationally hashed and stored securely on the edge using Cloudflare D1. We cannot read your custom passwords.

2. Data Retention & Deletion

Our core promise is ephemeral storage. All incoming emails, attachments, and metadata associated with your temporary mailbox are subjected to an aggressive 90-day data retention cycle. Once an email reaches the 90-day mark, it is completely wiped from our Cloudflare D1 database.

You also possess the absolute right to manually delete emails at any point from your inbox dashboard. Once manually deleted by a user, the data is instantly purged and cannot be recovered by any means.

3. Log Data and Edge Routing

Our architecture utilizes Cloudflare Email Routing to process incoming SMTP traffic. This means emails hit Cloudflare's secure edge nodes before being inserted into our database. We collect highly anonymized, aggregated analytics strictly for the purpose of rate-limiting and preventing API abuse (such as monitoring the total volume of requests per country or ASN).

We do NOT log your individual IP address in a way that correlates it to a specific mailbox. We do NOT use invasive third-party trackers, heatmaps, or session-recording software that monitors your keystrokes or mouse movements.

4. Cookies and Local Storage

TTMAIL utilizes browser Local Storage exclusively for functional purposes. When you generate a mailbox, we save your generated alias and optional password locally on your device so you don't lose access if you accidentally close the tab. We do NOT use tracking cookies for targeted advertising or cross-site tracking. You can clear your browser data at any time to sever ties with a temporary mailbox.

5. Advertising & Third-Party Vendors

To keep TTMAIL 100% free, we may display advertisements via Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our sites and/or other sites on the Internet.

You may opt out of personalized advertising by visiting Google's Ads Settings. We ensure our ad placements do not interfere with the usability of our core temporary email service.

6. Compliance with Laws

While we advocate strongly for user privacy and anonymity, TTMAIL is a law-abiding entity. We will cooperate with valid, legally binding subpoenas or court orders from recognized legal authorities. However, because our service requires no registration and strictly deletes data after 90 days, the information we possess is fundamentally limited by our architecture.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time as our infrastructure evolves or as new privacy regulations (such as GDPR or CCPA) require. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

8. Temporary Phone Number & SMS Privacy

TTMAIL operates a Free Temporary Phone Number (Receive SMS Online) service powered by Telnyx and SignalWire enterprise telecom webhooks. This section describes our data handling practices specifically for the SMS and OTP receipt features.

8.1 What SMS Data We Collect

The sender phone number (From) of the incoming SMS message, as transmitted by the carrier network.
The recipient virtual phone number (To) that the SMS was delivered to.
The text body of the SMS message, which typically contains an OTP code, verification token, or short notification text.
The timestamp of when the message was received at our webhook endpoint.

8.2 How SMS Data Is Used

Received SMS messages are stored in our Cloudflare D1 distributed edge database solely to display them to users who visit the corresponding virtual phone number page. The messages are presented in a paginated live inbox (30 per page) with 10-second automatic refresh. We do not analyze, sell, resell, or share the SMS content with any third party for commercial purposes.

Important: All virtual phone numbers displayed on TTMAIL are publicly shared. Any user who visits the number page can read incoming SMS messages. You must never use TTMAIL virtual numbers for sensitive or private purposes such as banking OTPs, personal medical services, or anything requiring confidential message delivery.

8.3 Automatic 10-Day Data Deletion

All received SMS messages are subject to an automatic 10-day data retention policy. Our Cloudflare edge database automatically purges all SMS records, OTP codes, sender numbers, and message timestamps after 10 days from their received timestamp. This purge process is triggered on every API request and webhook event, ensuring that expired data is consistently removed without any manual intervention. No backup copies of SMS messages are kept beyond the 10-day retention window.

8.4 Webhook Data Processing

When a carrier (Telnyx or SignalWire) delivers an inbound SMS to our webhook endpoints (/api/webhooks/telnyx and /api/webhooks/signalwire), the payload is processed immediately at the Cloudflare edge without storing raw webhook logs. We do not retain carrier authentication tokens, IP addresses of the carrier delivery servers, or any metadata beyond the SMS content fields described in Section 8.1.

8.5 OTP Code Extraction

TTMAIL automatically identifies 4 to 8 digit numeric sequences in incoming SMS messages and highlights them as potential OTP or verification codes for user convenience. This extraction is performed entirely in your browser (client-side) and does not involve any additional data processing or transmission to our servers beyond what is described in this policy.

9. GDPR & Global Privacy Compliance

TTMAIL is committed to compliance with applicable data protection regulations worldwide, including the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and similar regional laws. Under these frameworks:

Right to Access: Because we do not collect personally identifiable information tied to individual users, we cannot provide "your data" beyond what is visible in the public inbox UI itself.
Right to Erasure: For email data, you may manually delete messages from your inbox dashboard. For SMS/temp number data, all records are automatically erased after 10 days.
Data Minimization: We collect the minimum amount of data necessary to operate the service. We do not collect names, government IDs, payment information, or location data.
No Cross-Border Personal Data Transfers: Our infrastructure runs on Cloudflare's edge network, which processes requests in the nearest data center to the user. We do not intentionally transfer personal data to jurisdictions with weaker data protection laws.

10. Contact for Privacy Inquiries

If you have questions about this Privacy Policy, concerns about how your data is handled, or requests related to data subject rights under GDPR or CCPA, please contact us via our Contact Page. We aim to respond to all privacy-related inquiries within 72 hours.

Last updated: September 2026