Temporary inboxes expire with their addresses
Temporary emails are kept only while the address is active; they are not long-term archives. Check the countdown shown in the interface. Use an email account you control long term for important information.
Forwarding records kept for 30 days
Logged-in users can view recent forwarding records and delete them. Copies in the destination mailbox are managed by that mailbox provider; deleting them here cannot retract those copies.
Credentials stay in this browser
Local storage helps restore temporary addresses and login sessions. On shared devices, log out and clear browser data after use to prevent others from accessing your account.
1. What this policy covers
HideRelay is a tool for receiving test emails and provides alias forwarding to verified email addresses. This policy covers how information is handled when you use the site, create addresses, read email, log in to manage your account, or contact support. It does not cover the practices of email senders or forwarding destination providers.
We do not describe “no sign-up required” as completely anonymous or untraceable. Providing an online service still involves connection and security information. Email senders may also include their own identifiers in message text, links, or images.
2. Information handled for receiving and forwarding email
Temporary inboxes involve the address, access credentials, expiry time, email subject, sender, received time, and message content, so incoming messages can appear in your inbox. Forwarding also requires your verified destination email, aliases, active status, and delivery results to route messages, retry delivery, and let you review records.
When you log in, we process verification results, session credentials, and necessary security status. If you set up an authenticator, we generate a key and QR code for linking it and verify time-based codes. Do not send your key or current code to support.
To maintain reliability, prevent abuse, and troubleshoot issues, our servers may process IP addresses, request times, response status, and device request information. Support messages may also include the contact details and issue description you choose to provide. Please remove sensitive details before sending.
3. Retention periods and limits on actions
The table below distinguishes information stored on our servers from browser credentials, so removing data from one place is not mistaken for removing every copy. We do not guarantee that expired temporary inboxes or deleted emails can be restored.
| Information type | Retention or use | What you can do |
|---|---|---|
| Temporary addresses and incoming email | Kept for the address’s active period and deleted when it expires | Delete individual messages, change addresses, or extend the expiry before it ends if available |
| Forwarding email records | Recent records kept on the site for 30 days | View and delete them in the dashboard; remove copies from the destination mailbox yourself |
| Forwarding email and alias settings | Used to provide the forwarding service you enabled | Pause or delete aliases; contact support for account-level requests |
| Browser credentials stored locally | Stored in this browser to restore addresses and sessions | Log out to clear login credentials; clear site data to remove local records |
| Security and support records | Handled as needed for troubleshooting, security, and legally required retention | Contact support to ask what applies; no single deletion period is promised |
Logging out does not delete a separate temporary inbox. Clearing browser records does not send a retraction request to the sender, recipient, or any system that has already received a copy.
4. Local storage and essential page state
The site uses browser storage to keep temporary email credentials and login sessions, and session state to remember which email you are reading. This means you do not have to recreate an address after refreshing, and polling will not interrupt what you are reading.
Disabling or clearing storage may make your current address unrecoverable or require you to log in again. These states are not secure backups; anyone with the email access credentials or login session may be able to access the associated inbox.
5. Sharing, external content, and infrastructure
We use the infrastructure needed to receive, deliver, host, and securely operate the service, limiting related processing to what is necessary to provide it. Selling email content is not a purpose of this service, and we do not claim that using a temporary address makes it invisible to every third party.
Emails come from external senders. Clicking links or loading external resources may share network information with the relevant sites. The interface applies security measures to email HTML, but this does not mean we endorse the safety of every link or attachment. Stop if a message asks for your password, payment, or keys.
We may need to process relevant records when legally required or when necessary to protect the service and others, to the extent permitted by applicable law. Cross-border networks and service infrastructure may involve different regions. Do not use this service for restricted materials subject to specific data residency requirements.
6. Security measures and your choices
We reduce risks through transport security, access credentials, content isolation, and abuse prevention, but no online service can guarantee absolute security. A temporary email service is not a password manager, medical records vault, or account recovery channel. Do not use it to receive highly sensitive information.
You can delete emails, pause or delete aliases, log out, clear local state, and choose to enable a phone authenticator. An authenticator cannot protect a destination email account or browser session that has already been compromised, so protect your regular email account and avoid staying logged in on shared devices.
7. Requests to access, correct, or delete information
To ask about, access, correct, or delete information about you, contact us at support@hiderelay.com. State the type of request and provide non-sensitive details sufficient to locate the records. We will handle your request according to its scope and applicable law, and may ask you to reasonably verify your identity or control of the email address.
Do not send passwords, verification codes, authenticator keys, or complete sensitive emails. We may be unable to locate or provide content associated with an expired or deleted temporary address, or one you cannot show you control. Records that must be retained by law may not be eligible for immediate deletion.
8. Children, policy updates, and contact
This service is for users able to understand and follow its usage limits; it is not intended to collect children’s personal information. If you believe someone has submitted information about a child that should not be processed, contact support and avoid repeating that information in your message.
We update this page and date it when features or data practices change. We’ll explain significant changes through appropriate notices on the site. Please also read our Terms of Service for usage rules and acceptable uses. This policy does not replace the privacy notices of email senders or destination mailbox providers.