Privacy Policy

Last updated: May 2026

What We Collect

Pokemail collects the absolute minimum data needed to operate. We store a session cookie (httpOnly, no tracking) and temporarily store received emails in memory for the duration of your session (max 60 minutes). We do not collect your name, IP address, real email, phone number, or any personal data.

Email Data

Emails received at your temporary address are stored in memory (Redis) with an automatic expiration. When the timer runs out, all data — emails, attachments, session — is permanently and irreversibly deleted. No backups are kept of temporary email content.

Analytics

We use Plausible Analytics, a privacy-focused analytics tool that does not use cookies and does not track individual users. It collects only aggregate page view data. No personal data is sent to any third party.

Cookies

We use exactly one cookie: pokemail_sid — a signed session identifier. It is httpOnly (JavaScript cannot read it), Secure (HTTPS only), and SameSite=Strict (not sent to other sites). It expires when your session ends.

Your Rights (GDPR)

Since we don't collect personal data, there is nothing to delete. However, you can click "Forget Me" at any time to immediately wipe your session and all associated data. For paid subscribers, contact us to request full data deletion.

Contact

Questions about privacy? Email us at privacy@pokemail.app.