Privacy Policy

1. Who we are

This Privacy Policy explains how TapMail (“we”, “us”) handles information when you use tap-mail.com, including the free inbox and TapMail Premium. We collect as little as we can, keep it only as long as we need it, and never sell it.

2. Information we collect

Free inbox (no account).

• The temporary address we generate for you, and the emails it receives.
• A session cookie that connects your browser to your address.

Premium accounts.

• Your name and email address, and your password, which we store only as a secure one-way hash.
• A profile picture, if you upload one.
• Your addresses and the emails they receive, your connected domains and your forwarding addresses.
• Your plan and payment records (plan, amount, date and status). Card details are entered on Stripe's secure page and are never sent to or stored by us.
• Login sessions and the time you were last active, used to keep you signed in and protect your account.

Contact form. Your name, email address and message, so we can reply.

Technical information. Like most websites, our servers process IP addresses and basic request information to deliver the site, prevent abuse (for example, rate limits) and keep the Service secure. We also use Google Analytics to understand, in aggregate, how the site is used.

3. How we use it

• To provide the Service: create addresses, receive and show your emails, and run your Premium account.
• To process payments and renewals, and to keep records required for accounting.
• To answer your messages and support requests.
• To protect the Service and its users from spam, fraud and abuse, and to enforce our Terms.
• To understand how the site is used so we can improve it.

4. The emails you receive

Emails sent to your addresses are stored only so you can read them, and scripts inside them are removed before they're shown. We don't read, sell or use them for advertising. We may look at specific messages only when needed to investigate a reported abuse of the Service or when required by law.

5. How long we keep it

• Free inbox: the address and its emails are deleted automatically after about 10 minutes.
• Free addresses are remembered (the address only, no emails) for 30 days, so the same address isn't given to someone else soon after.
• Premium emails: kept for 30 days, or until you delete them or the address.
• When a Premium plan ends: addresses and emails are deleted 7 days later. Your account remains until you ask us to delete it.
• Contact form and support messages: 30 days.
• Payment records: as long as required for tax and accounting purposes.

6. Service providers we use

We share information only with providers that help us run TapMail, and only what each one needs:

• Stripe processes payments and subscriptions (Stripe's privacy policy).
• Cloudinary stores profile pictures.
• Google Analytics provides aggregate usage statistics.
• EmailJS may deliver contact-form messages to our team.
• Our hosting and database providers run the servers that store the data described above.

We don't sell or rent personal information, and we don't share it for others' marketing. We may disclose information if required by law, or to protect the rights, property or safety of TapMail, our users or others.

7. Cookies

• session_id: connects your browser to your free address. Expires after 10 minutes.
• auth_token: keeps you logged in to Premium. Expires after 30 days or when you log out.
• Your light or dark theme choice, stored in your browser.
• Google Analytics cookies, used for aggregate statistics.

8. Security

We use HTTPS, store passwords only as secure hashes, keep login cookies inaccessible to page scripts, and restrict who can access our systems. No service can be perfectly secure, so please don't use temporary addresses for sensitive or long-term accounts.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict how we use it. Premium users can update their name, password and picture in their profile at any time. For anything else, including deleting your account, contact us using the details below. We don't sell personal information as defined by the California Consumer Privacy Act.

10. Children

TapMail isn't intended for children under 13, or under 16 in the European Economic Area and the UK, and we don't knowingly collect their personal information.

11. Changes to this policy

We may update this policy as the Service changes. We'll post the new version here with a new date, and notify Premium users of significant changes.

12. Contact us

Questions about your privacy? Reach us through our contact form or at support@tap-mail.com. See also our Terms of Service.