Privacy Policy
Last updated: January 2026
TL;DR — the short version
- ✓ We do not collect your name, phone number, or real email address.
- ✓ We do not log IP addresses or track your browsing behaviour.
- ✓ We do not run third-party trackers, analytics scripts, or advertising pixels.
- ✓ We do not sell, rent, or share your data with any third party.
- ✓ All emails and inboxes are permanently deleted when they expire.
- ✓ If you pay for Premium via Stripe, only Stripe processes your payment — we never see your card details.
1. What we collect — and what we don't
FlashTemp is designed from the ground up to require as little data as possible to function.
What we store temporarily
- The email address you generate (e.g.
yourname@flashtemp.email) and its expiry timestamp. - The contents of emails delivered to that address (sender, subject, body, attachments) — only for the duration of the inbox lifetime.
- If you register a free account: your chosen username, an optional recovery email address, and a hashed + salted password. Passwords are never stored in plain text.
What we never collect
- IP addresses or geolocation data.
- Browser fingerprints, device identifiers, or session recordings.
- Real name, phone number, or any government ID.
- Behavioural analytics or click tracking.
2. How data is deleted
Data deletion is automatic and irreversible. Every inbox has an expiry timestamp set at creation:
- Guest inboxes expire after 24 hours.
- Free registered accounts expire after 7 days.
- Premium accounts expire after 30 days.
A scheduled Cloudflare Worker runs daily at 02:00 UTC and permanently deletes all expired inboxes, messages, and attachments from both the database (Cloudflare D1) and file storage (Cloudflare R2). There is no archive, backup, or recovery — deletion is final.
Registered accounts that have been inactive for 90 days are also permanently deleted along with all associated data.
3. Third-party services
FlashTemp uses the following third-party infrastructure providers:
- Cloudflare — hosts all compute, database, file storage, and email routing. Cloudflare's own privacy policy applies to network-level processing. We do not enable Cloudflare Analytics or Zaraz on this domain.
- Stripe — processes Premium upgrade payments. If you choose to upgrade, you interact with Stripe's checkout directly. FlashTemp never receives or stores your payment card details. Stripe's privacy policy applies to payment data.
No advertising networks, social media trackers, or analytics platforms (e.g. Google Analytics, Meta Pixel, Hotjar) are present on this site.
4. Cookies and local storage
FlashTemp does not set any tracking or advertising cookies. The site uses browser localStorage only to remember your login token and theme preference. These values never leave your device and are not transmitted to any third party.
5. Email content
Emails delivered to FlashTemp inboxes are processed and stored solely to display them to the inbox owner. We do not read, scan, index, or analyse the content of emails for any purpose other than rendering them in your inbox. Email contents are deleted automatically when the inbox expires.
6. Your rights
Because we do not collect personal information, most data protection requests (access, portability, rectification) do not apply in the traditional sense. However:
- You can delete any individual message at any time from within the interface.
- You can delete your account and all associated data at any time (account deletion feature coming soon — contact us in the meantime).
- Guest inboxes and their contents auto-delete within 24 hours with no action required.
7. Changes to this policy
If we make material changes to this policy, we will update the "Last updated" date at the top. Continued use of FlashTemp after changes are posted constitutes acceptance of the updated policy.
8. Contact
Questions about this policy? Create a temp email at FlashTemp and use it to contact us — the irony is not lost on us. Alternatively, reach us via the feedback mechanism on the homepage.