Important note: Temporary email is intended for short-term receiving and does not provide end-to-end encryption or absolute anonymity. Anyone with access to the inbox credentials may be able to view its messages. Do not use it for banking, medical, or other sensitive accounts.
1. What information we process
Temporary inboxes
When you create a temporary inbox, the system generates an email address, random access credentials, and an expiration time. To display incoming messages, the system processes the sender, subject, body, delivery time, and basic email headers. Temporary inboxes do not require your name, password, or real email address.
Forwarding accounts
When you use email forwarding, we process your verified destination email address, sign-in verification status, aliases you create, activation status, forwarding results, and online archives. If you enable two-step verification, we also process the security settings needed to complete verification. We never ask for your email password.
Operational and security data
Servers may record IP addresses, request times, browser types, request paths, rate-limit events, and error details. We use this data to prevent abuse, troubleshoot delivery failures, and maintain service security—not to build advertising profiles.
2. Why we process this data
- Generate and maintain temporary addresses, and receive, display, and delete messages;
- Verify accounts, create aliases, and forward incoming messages to the specified email address;
- Detect spam, malicious automation, excessive requests, and attacks on the service;
- Respond to support requests and diagnose delivery delays or feature failures;
- Comply with applicable legal requirements and protect users and infrastructure.
3. Retention and deletion
Temporary inboxes are valid for 3 hours by default and may be extended where the product allows, up to a maximum of 24 hours per address. When an inbox expires or is manually destroyed, its address and messages are removed from the online receiving service. Forwarded messages are typically archived online for 30 days, then deleted from user-accessible archives.
After a forwarding alias is deleted, it no longer forwards new messages. Incoming messages received while an alias is disabled are silently discarded. For security, backup integrity, abuse prevention, and legal obligations, some minimal logs may remain in restricted systems for longer and are deleted on a rolling internal schedule.
4. Email, attachments, and third parties
Temporary email may show that an attachment exists but does not store its contents. The forwarding service handles attachments according to message size: messages within the limit may be forwarded and archived, while larger messages may have only their body forwarded or may be rejected. The sender and your destination email provider handle messages under their own policies; these processing parties are not controlled by Fwdaway.
We do not sell message content or real email addresses. Only when necessary to provide hosting, networking, abuse prevention, or email delivery may restricted infrastructure providers process limited data on our behalf. We may also disclose necessary information when required by a lawful and valid compulsory request.
5. Local storage and access credentials
Browser local storage may retain temporary inbox access credentials and interface state so you can still access an unexpired inbox after refreshing the page. You can remove this information by destroying the inbox, clearing site data, or using your browser’s privacy settings. Do not share complete links that contain access credentials.
6. Your choices
- Change or destroy your temporary email address at any time;
- Disable or delete forwarding aliases, or clear online archives;
- Stop using the service and request help with account-related privacy questions;
- Request access to, correction of, or deletion of applicable personal information under the laws where you live.
To prevent someone else from claiming an account, we may require identity verification through the destination email address. Some requests may be limited for security, fraud-prevention, or legal reasons.
7. Children, international transfers, and changes
This service is not intended for children who are below the age at which they can independently consent to data processing in their location. Our infrastructure may operate across different jurisdictions, and we apply access controls proportionate to data sensitivity. If this policy changes materially, we will update the date on this page; please review it again before continuing to use the service.
For privacy questions, contact support@fwdaway.com. Please do not paste verification codes, complete message contents, or temporary inbox access credentials into support emails.