Privacy Policy

Short version: nullmail stores no personal data. No accounts, no names, and no cookies or identifiers of our own. One third party is present — the ad network that keeps the service free — and About ads describes it in full rather than leaving you to guess. Messages live only until the inbox expires, then are hard-deleted. Inboxes are public-by-address, treat them like postcards.

What we collect

• Messages sent to temporary addresses, stored until inbox expiry (default ~60 minutes, extendable), then permanently purged.
• IP addresses, kept only in short-lived abuse logs for rate limiting and incident response, then deleted.
• No accounts, no PII, no cookies of our own. The inbox works with storage and cookies disabled. “We” here means nullmail: the ad script on the page is the one third party on this site, and About ads says exactly what it does. We never build a profile of you, because we hold nothing that identifies you.

Lawful basis & purpose limitation (GDPR)

Processing is based on legitimate interest in providing the requested service and preventing abuse (GDPR Art. 6(1)(f)). We do not profile users, do not sell or share inbox contents, and do not use message data for advertising. Data minimisation is architectural: we cannot leak what we do not store.

Retention

Messages: deleted at inbox expiry (hard delete, no recovery). Abuse logs: deleted on a short rolling window. Backups roll off within 30 days at most.

Your rights

Under GDPR/UK GDPR you have rights of access, erasure, and objection. Because we hold no PII tied to you, there is generally nothing to fulfill, but if you believe data concerning you is stored in a specific inbox, contact us via the abuse-report page and we will purge it promptly.

About ads

Ads keep nullmail free, and one ad script is the only third-party code on this site. It is served by Monetag (a Propeller Ads brand) as an In-Page Push banner: a small, dismissible panel in the corner of the page. It does not block the inbox, does not open anything over it, and does not change how the service works.

That script belongs to someone else, so it does its own thing under Monetag’s policy, and we would rather tell you that than claim otherwise. It may set cookies or read a device identifier to cap how often you see an ad, measure clicks and choose what to show, and it receives your IP address, user agent and the page URL as part of an ad request. That is the whole of the third-party tracking exposure on this site, and it is limited to the ad itself.

What it never gets from us: your inbox contents, the address you generated, or anything that ties an inbox to you. We do not pass message data to it, do not sell or share inbox contents, and do not match ads to your identity. Message data is never used for advertising.

You can switch it off entirely. An ad blocker removes the script and the service works exactly the same — the inbox has no cookies or login of its own to lose. If you are in the EEA or the UK and would rather not have an ad script running at all, blocking it is the supported option: nothing here is gated behind seeing an ad.

Public-by-address model

Anyone who knows a temporary address can read that inbox. Do not use the Service for confidential communications. This model is the product; if you need confidentiality, use a private mailbox.

Who is responsible for your data

nullmail is run by an independent team based in India, which acts as the data controller for the processing described here. Privacy questions and data requests go to abuse@nullmail.email, which reaches a person rather than a ticket queue.

If you are in India, the Digital Personal Data Protection Act 2023 gives you the right to access, correct and erase your personal data, and to nominate someone to exercise those rights on your behalf. Because we hold nothing that identifies you, there is usually nothing to act on — but the request is yours to make, and we answer it.

Contact

Abuse reports, takedown requests, and privacy questions: abuse@nullmail.email, or the abuse report page if you would rather not use email.

Last updated: 2026-10-02