Privacy Policy
Effective Date: October 2026 • Applies to https://generatoremail.com
Important Notice About Public Disposable Inboxes
Standard randomly generated disposable email addresses on Email Generator do not require a password or account registration. Because any visitor who knows or enters the same public disposable address can view incoming messages sent to that address, never use temporary email addresses for banking, healthcare, legal records, primary account recovery, or confidential personal correspondence.
1. Information Required to Use Email Generator
You can generate and view disposable email addresses on Email Generator without creating an account, providing your real name, or submitting a personal email address or phone number.
If you voluntarily contact support, submit a custom domain request, or register an administrator workspace, we process the username, domain details, or message content you submit solely to provide that functionality.
2. Inbox Access Model & Custom Addresses
- Standard Disposable Inboxes: Randomly generated addresses on platform domains are receive-only temporary mailboxes accessible without login. Direct inbox views (
/user@domain) are markednoindex, nofollowso search engines do not index inbox pages. - Buyer-Code Custom Usernames: Custom local-part addresses created with an authorized Buyer Access Code are provisioned with dedicated mailbox credentials stored in your browser session. Administrative and RFC-reserved prefixes (such as
admin@,support@,postmaster@, andsecurity@) are blocked from public creation to prevent impersonation. - External IMAP Reader (
/external/<id>): When you connect an external IMAP mailbox, connection credentials are encrypted at rest on the server using AES-256-GCM and bound to a revocable random link ID. Anyone holding that unique link ID can view messages until you click Disconnect/Revoke, which deletes the stored link record.
3. Message Handling, Retention & Attachment Stripping
- Receive-Only & Binary Attachment Stripping: Temporary inboxes are strictly receive-only. To reduce malware and phishing risks, our IMAP parser strips binary file attachments and renders HTML bodies inside a sandboxed preview frame with scripts disabled.
- Message Retention & Deletion: Messages remain on the mail server only while the temporary mailbox exists or until purged. When your browser tab is open, client-side auto-purge runs according to your selected retention timer (default 1 hour) or immediately when you purge/delete a mailbox. Mailboxes and messages may also be cleared during routine server maintenance without notice; we do not guarantee message archival or long-term storage.
- Operational Admin Diagnostics: For abuse prevention and delivery diagnostics on platform-owned disposable domains, up to 500 recent message records may be buffered in restricted server storage accessible only to authenticated platform administrators. External IMAP accounts connected via
/externalare excluded from this diagnostic buffer.
4. Browser Local Storage, Cookies & Rate Limiting
Email Generator stores interface preferences (active temporary inbox tabs, theme selection, language, sound toggle, and refresh/purge intervals) locally in your browser's localStorage. You can clear these at any time by clearing site data in your browser.
Authenticated administrator sessions use HTTP-only signed session cookies and CSRF tokens. Standard web server logs and short-lived in-memory IP rate-limit counters are processed to defend against automated scraping, brute-force attacks, and SMTP/IMAP abuse.
5. Contact & Abuse Reporting
If you have questions about this Privacy Policy or need to report abuse involving a domain hosted on Email Generator, please contact us via our Contact & Abuse Reporting page or email [email protected]. Please also review our Terms of Service.