Privacy

Privacy

Last updated 26 September 2026.

This page explains what the operator of https://themailinator.com does with information. Read it before you open an inbox or send mail to @themailinator.com.

Public by design

Messages stored for an address on this domain can be read by anyone who opens that inbox. That includes strangers, teammates, and anyone who later guesses the name. Asking search engines not to index inbox URLs is a request we publish in our robots file. It is not a lock. Do not send personal, financial, medical, or secret information to these addresses.

Who we are

The operator is the person or company that publishes TheMailinator at https://themailinator.com. A postal address and a registered company name are not printed on this page. If your local law requires an imprint, the operator should add that identity here before offering the site to the public. Until then, use the contact method below and assume the inbox is public.

Information inside a message

When mail is delivered to an address on our domain, we store:

• the recipient address
• the sender address and display details the message carried
• the subject
• a message id, when one was present
• the time we stored it
• the message content, including a raw copy and, when we can read them, the plain-text and HTML parts

We store this so the inbox page can show the message. We do not ask you to create an account, and we do not ask for your name or a password.

Information about a visit

The host that delivers the website and receives the mail can keep technical logs, such as IP address, user agent, the URL you requested, and the time. We use those logs to run and protect the site. Pages also load Google Analytics, measurement ID G-FWSHW1Y1CQ. Google receives the page address, a client identifier, and technical details such as the browser and an approximate location derived from the IP address. We do not add advertising pixels or third-party fonts. Message contents are not sent to Google Analytics.

Cookies

Google Analytics may store cookies in the browser, including cookies named _ga and _ga_FWSHW1Y1CQ, so a later visit from the same browser can be counted together. We do not use browser storage for an account. The host may set a technical cookie to filter abusive traffic. That cookie is described in the host’s own notice. The host is Cloudflare, Inc. and its affiliates, which provide the network, the database, and email routing.

Why we process this information

We process message data to display the public inbox you asked to open, and to keep the service working. If a law where you live requires a legal basis, the basis is that the inbox cannot function unless the message is stored and shown, and that we have a legitimate interest in operating a clearly public test inbox. Do not use the site if you need a private mailbox or if you do not want a message published to anyone who opens the name.

We do not sell personal information. We do not use message contents to train machine-learning models. We do not make automated decisions that produce legal effects about you.

Who can see messages

Anyone who opens the inbox can see what the page shows. Our host can process the data as the company that stores the database and delivers the pages. We may also share information if the law requires it.

How long we keep it

Messages stay until we delete them. We do not promise a timetable. Technical logs follow the host’s retention for security logs. A deletion request does not guarantee that a backup or a log line disappears the same day.

Deletion and other requests

You may ask us to delete messages stored for a mailbox you used. Write to privacy@themailinator.com with the mailbox name and, if you have it, the message id. Do not include the body of the message, a password, or an identity document. The privacy address is itself a public inbox.

We will delete what we can still find in the mailbox store. We may ask you to show that the request is reasonable when many people could claim the same public name. People in some regions also have rights to access, correct, or object to certain processing. Those rights have limits when the information was sent into a service that publishes it, and when honoring a request would expose someone else. Contact the same public address to make a request. You can also complain to a privacy regulator where you live.

Children

The site is not directed at anyone under 16. Do not use it to collect a child’s information. If you believe a child’s personal information was sent here, ask for deletion and include the mailbox name only.

International processing

Cloudflare may process data in more than one country. If you send a message, or open a page, you understand that the public copy can be read from anywhere.

Security

We rely on the host’s access controls for the database and the site. This is not end-to-end encryption, and public display is intentional. No method of storage is perfect. Do not send information you cannot afford to lose or to see repeated.

Changes

If we change this page, we will update the date at the top. A major change will be reflected in the text you are reading, not in a separate notice to an account, because there are no accounts.

Contact

Privacy requests go to privacy@themailinator.com. Please read the warning above before you send one. The terms explain acceptable use and removal.