Less exposure. Not a private mailbox.

An address can be the key to a public inbox

Public disposable providers do not offer the same access model as a private email account protected by a password and multifactor authentication. Anyone who knows a public mailbox address may be able to read it at the provider.

GetaTempMail uses a random session cookie to separate visitors inside this app. That protects access through GetaTempMail’s own inbox endpoints, but does not change how the upstream provider exposes a public address. A hard-to-guess name is not a guarantee of confidentiality.

What the reading view protects against

GetaTempMail sanitizes email markup and displays the result inside an isolated frame. Scripts, forms, remote images, and tracking pixels are blocked. This reduces the chance of a message running active content or fetching a remote image just because you opened it.

A clickable link can still lead to an untrusted website. Check destinations before opening them and never enter a real password in response to an unexpected email. Filtering a message’s display does not verify its sender or linked content.

Keep lasting and sensitive accounts elsewhere

Use a private, recoverable inbox for information that matters beyond a short task. A temporary inbox is better suited to disposable tests and low-stakes resources.

• Do not receive financial or identity documents here.
• Do not use public mail for personal account recovery.
• Do not send production secrets or customer data to a test inbox.
• Do not rely on session expiry to delete every copy of an email.

Read the data policy

GetaTempMail keeps a local session cache for one hour and removes expired records within a minute. The selected provider receives the email and applies its own retention rules. Guerrilla Mail also receives the visitor IP and browser user agent required by its API. Our privacy page explains the local and provider responsibilities separately.

A few common questions