Privacy Policy

Last updated: October 26, 2026

Information we collect

Generated addresses and their messages are temporary. You do not need a personal account, and we do not ask for your name, real email address, or payment details to create an inbox. Standard server logs may record your IP address, browser user agent, access time, and requested page for a limited period to operate the service, prevent abuse, and limit excessive inbox creation.

Cookies and local storage

PoofMail uses your browser's local storage to remember the active inbox and its session token, so refreshing the page does not change your address. Cookies may be used for basic functions and, if enabled, advertising as described below. Clearing site data ends your local session; returning to the site then creates a new inbox. Clearing browser data alone does not delete the old inbox from the server before its expiry.

Advertising: Google AdSense

The site may display advertisements served by Google AdSense. If enabled, Google and its partners may use cookies to personalize advertising based on previous visits to this and other websites.

You can manage personalized ads through Google Ads Settings, or opt out of some third-party advertising cookies through YourAdChoices.

Message storage and deletion

Temporary inboxes and messages are held in server memory and in a recovery snapshot on the same server, so restarting the service does not remove active inboxes. The snapshot is refreshed periodically and when the service stops. Expired or deleted inboxes are removed from memory and from the next snapshot. This snapshot is not a permanent archive and does not extend an inbox's lifetime.

Where your email goes

Incoming mail is received directly by our own server for poofmail.net, rather than passing through a third-party disposable email provider. The server accepts messages only for addresses generated through this site. It rejects other recipients and cannot relay outgoing mail.

Inbox access requires the session token stored in your browser. Anyone who has that token or access to your browser session may read the messages. Messages are not encrypted at rest or end-to-end encrypted. Do not send private or sensitive information to a temporary address.

Children's privacy

This site is not intended for children under 13, and we do not knowingly collect their personal information.

Policy changes

This policy may be updated as the service develops. Continued use after changes are published means you accept the revised policy.

Contact

Questions or feedback? Visit our Contact page.