Last updated: April 5, 2026

1. Introduction

Throwmail.io - Disposable Email Service ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our disposable email service, in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable national data protection laws.

2. Data Controller

The data controller responsible for your personal data is: Throwmail.io - Disposable Email Service. If you have questions about this policy or your data, you may contact us via our contact page.

3. What Data We Collect

Our service is designed to minimise data collection:

Temporary email addresses: Generated and stored only for the duration of your session or as long as the address remains active. No account is required for basic use.
Messages received: Emails sent to your temporary address are stored only to display them to you. They may be deleted automatically after a period or when you leave.
Account data (optional): If you register, we store the data you provide (e.g. email, password hash) to manage your account.
Technical and usage data: IP address, browser type, and similar technical data may be processed where necessary for security, fraud prevention, or legal obligation.

4. Legal Basis (GDPR)

We process your data on the following bases:

Contract: To provide the temporary email service you request.
Legitimate interests: To operate, secure, and improve our service.
Legal obligation: Where we must retain or disclose data under applicable law.
Consent: Where we ask for your consent (e.g. optional cookies). You may withdraw consent at any time.

5. How Long We Keep Data

Temporary emails and messages are typically retained only for the time they are in use or for a short period thereafter. Account data is retained while your account is active and for a limited time after closure as required by law. We do not retain your data longer than necessary.

6. Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the right to: Access (request a copy of your data); Rectification (correction of inaccuracies); Erasure (deletion in certain circumstances); Restriction of processing; Data portability; Object to processing; Withdraw consent; and Lodge a complaint with a supervisory authority (e.g. ICO in the UK, DPC in Ireland). To exercise these rights, contact us via the contact page. We will respond within one month where required by law.

7. Sharing and International Transfers

We do not sell your personal data. We may share data with service providers who act on our instructions. If we transfer data outside the EEA, we ensure appropriate safeguards as required by GDPR.

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or alteration.

9. Changes

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date. We encourage you to review it periodically.

Back to home