Draft. This text will be reviewed by a lawyer before launch.

Privacy Policy

Last updated: 2026-10-11

TempDog is built to know as little about you as possible. You don't need an account, we never ask for your name or real email address, and every inbox is deleted when the timer you chose runs out.

Who we are

TempDog is run by [Full name] (full details on the Operator details page). We are the “controller” of your data under the EU GDPR and the UK GDPR. We give every user the same protections, wherever you live. Privacy questions: contact us. Our UK representative: [name and address].

The short version

  • Your inbox and every email in it are deleted when the address expires or when you press Delete now.
  • An expired address is never given to anyone else.
  • Anyone who has your access key can open your inbox. Keep it private.
  • We don't sell your data. We don't read your emails, except to investigate a specific abuse report or when the law requires it.

What we process and why

DataWhyLegal basisHow long
Your random address and the duration you choseTo run your inboxContract (GDPR art. 6(1)(b))Until it expires or you delete it
Emails sent to your address, including attachmentsTo show them to youContractDeleted with the address
Your secret access key (stored as a one-way hash on our side)So only key holders can open the inboxContractDeleted with the address
IP address, browser type, request logs (never email content)Security, preventing spam and abuseLegitimate interest (art. 6(1)(f))IP kept unreadable (hashed) for 24 hours
Contact form messages and your reply addressTo answer youLegitimate interest[12 months]
Abuse and legal reportsTo handle them and keep a recordLegal obligation (art. 6(1)(c)) and legitimate interest[24 months]

What stays in your browser

Your browser keeps your addresses and access keys so you can come back to your inbox. This is strictly necessary and needs no consent. When you open an inbox with a QR code, the key sits in the part of the link that browsers never send to our servers. “Save as PDF” uses your browser's own print window; the email is not sent anywhere.

We currently use no analytics or advertising cookies.

Emails we don't let track you

Many emails hide tiny images that report when and where they are opened. We block them by default. If you press Load images, the sender may learn that the email was opened and your IP address.

Do Not Track

Our pages work the same whatever your browser sends. We don't track you across other websites ourselves. We do not respond to Do Not Track signals.

Who processes data for us

ProviderWhat forWhere
Cloudflare, Inc.Hosting, security, contact form, privacy-friendly visit countsGlobal network, USA
Amazon Web ServicesReceiving emails[region]
[Email provider of the operator]Receiving contact and abuse messages[ ]

Some providers are in the United States. Transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses (and the UK Addendum for UK users). Wherever you are, your data is processed in the European Union and the United States.

Your rights

You can ask to access, correct, delete or export your data, object to processing, or withdraw consent at any time. The fastest way to delete everything is Delete now, next to your address. Because we don't know who you are, we may only be able to act on an inbox if you show us its access key. Write to us; we answer within one month.

You can also complain to your local data protection authority, for example the ICO or ANSPDCP.

California residents

We collect the categories of data listed above, only from you and your browser, for the purposes listed above. We don't sell personal information. You can contact us about it.

Children

TempDog is for people aged 16 and over, or older if the law where you live requires it. We don't knowingly collect data from children below that age. If you think a child used the service, write to us and we will delete what we can.

Security

All connections use HTTPS. Stored emails are encrypted, access is limited to the operator, and inboxes are hidden from search engines. No system is perfect: if we discover a breach that puts you at risk, we will tell the authority within 72 hours and tell you where we can. More on our Security & privacy page.

Changes

When we change this policy, we update the date at the top. For important changes we also show a notice on the home page for 30 days.