Privacy Policy

Last updated: 1 January 2026.

This policy explains what Tempx (“we”, “us”) does with data when you use tempx.uk and mail.tempx.uk. Plain language is used on purpose.

The short version

What we collect

Email messages

When someone sends a message to a temporary address you generated, we receive and store the sender address, subject, date, plain-text body, a sanitized version of the HTML body, and metadata about attachments (file name, type, size). Attachment contents are discarded on receipt and never stored. Messages are held in storage isolated to that single address.

Technical data

Our infrastructure provider (Cloudflare) processes standard request information such as IP address, user agent and timestamps in order to route traffic, provide TLS, and block attacks. For rate limiting we store a salted, non-reversible hash of your IP address together with a short-lived counter; we do not keep your raw IP address in our own application storage.

Local storage in your browser

Your current temporary address and a signed access token are stored in your browser's local storage so your inbox survives a page reload. This data stays on your device. Clearing site data removes it.

Product analytics (optional)

If analytics are enabled, we record counts of a small set of product events: an address was generated, an address was copied, the inbox was refreshed, a message was opened, a new address was generated. We never send the email address, subject, sender, body or attachment details to analytics. Analytics requests are not sent when your browser indicates Do Not Track or Global Privacy Control.

How long we keep things

DataRetention
Email messagesDeleted automatically after the retention period shown in the app (default 1 hour), or immediately when you delete them.
Rate-limit countersExpire automatically within roughly an hour.
Infrastructure logs (Cloudflare)Kept for a short period by the provider for security and reliability, then rotated out.
Browser local storageUntil the token expires (a few days) or you clear it.

Who we share data with

We use Cloudflare, Inc. as our hosting, email-routing and security provider. Processing email and requests necessarily happens on their platform. We do not sell personal data and we do not share it with advertisers. We may disclose information if legally required to do so.

Legal bases (UK GDPR / GDPR)

We process technical and rate-limiting data on the basis of our legitimate interest in keeping the service available and free from abuse. We process email content in order to provide the service you are requesting. Where analytics are used, they are limited to anonymous aggregates.

Your choices and rights

Because addresses are anonymous and messages are deleted quickly, we usually hold no data that identifies you by the time you would ask about it. You can delete messages yourself at any time, generate a new address, or clear your browser storage. For questions about data protection, email privacy@tempx.uk.

Children

Tempx is not directed at children and should not be used by anyone under the age required to consent to online services in their country.

Limits of this service

Please do not treat a temporary address as private.

  • Email is delivered over standard internet mail and is stored briefly in readable form so it can be displayed.
  • The people who operate Tempx can technically access stored messages before they expire.
  • We make no claim that use of Tempx is anonymous, untraceable or perfectly secure.
  • Do not send passwords, identity documents, financial details or other sensitive content to a Tempx address.

Changes

If this policy changes materially we will update the date above and the sitemap. Continued use after a change means you accept the updated policy.

Contact

Privacy questions: privacy@tempx.uk. General contact details are on the Contact page.