Privacy Policy
Last updated: July 2026
The short version
Short Mail exists to protect your privacy. We collect no personal data and require no account. We show a few ads (via Google AdSense) to keep the service free; aside from that ad provider, we run no advertising trackers of our own. Everything you receive is automatically and permanently deleted when your inbox expires.
What we store, and for how long
| Data | Retention |
|---|---|
| Received emails (bodies, attachments) | Until your inbox expires (10 minutes – 7 days, your choice) or you delete them — then erased permanently |
| Inbox address and its access key (hashed) | Until inbox expiry, then erased |
| Technical abuse-prevention counters (hashed network identifiers, no raw IP addresses) | Up to 1 hour |
| Operational logs (metadata only: timestamps, message sizes) | Up to 7 days |
What we never do
- We never ask for or store your name, phone number, or real email address.
- We never sell or share received mail with anyone.
- We never load remote images or trackers in emails without your explicit click.
- We never send email on your behalf — the service is receive-only.
Third parties
The service runs on Cloudflare infrastructure; mail and web traffic pass through Cloudflare as our hosting and email-routing provider. We measure aggregate site usage with Umami, a privacy-focused analytics service that uses no cookies and collects no personal data — visits are anonymous and cannot be traced back to you. No advertising third parties are embedded.
Your rights (GDPR)
Because inboxes are anonymous and short-lived, deletion is built in: burn your inbox or let it expire and the data is gone. For any privacy question or request, contact privacy@short-mail.com.