Privacy Policy

Your mail has a retention period, and our data practices are clearly defined.

This policy explains what FWD collects when providing disposable email and long-term forwarding, why we process it, how long we retain it, and how you can contact us to exercise your rights. Last updated: September 7, 2026.

Retention and limits

Each data category is retained only as long as needed for its stated purpose.

Retention may be extended for a limited time due to security incidents, legal obligations, or valid disputes. After that period, the data is deleted or anonymized.

Data category Purpose Typical retention period Limits
Temporary address, token, and email Create and display a temporary inbox Address validity period and brief cleanup window Not used for advertising profiles
Receiving email and login records Verify identity, maintain sessions, and prevent abuse While the account exists and for the necessary security period Not disclosed to alias senders
Forwarded messages and status Delivery, troubleshooting, and user access Up to 30 days Automatically cleaned up after expiration
Security logs Rate limiting, attack detection, and service reliability Necessary short-term security window Access restricted and deleted regularly

How we obtain data

When you create a temporary address, submit a receiving email, create an alias, or receive mail, our systems collect the data needed to complete that action. Your browser and our servers also generate basic technical logs to prevent abuse and diagnose problems.

Messages are sent by external senders and may contain personal information they choose to include. Do not use this service to receive sensitive data beyond what you actually need.

Legal basis and sharing

We process data to provide the services you request, keep our systems secure, and comply with applicable obligations. Providers of infrastructure, email delivery, or security services process only the necessary data and only on our instructions.

We do not disclose message content to third parties unless required by law, needed to protect users or service security, or necessary to fulfill your explicit request.

Security and international processing

We use access controls, transmission protection, least-privilege access, and retention limits to reduce risk. However, no internet service can guarantee absolute security. Do not use a disposable inbox as the only recovery method for an important account.

Service providers may process data in different regions. We use applicable contractual and security measures to protect cross-border processing.

Your choices

Access, correction, deletion, and complaints

Logged-in users can pause or delete aliases from the dashboard. You can end a temporary inbox simply by changing its address. For other requests, email us from the relevant receiving address so we can verify control of it.

We respond to reasonable requests within the time limits required by applicable law. If you believe our processing is improper, you can contact us first or file a complaint with the competent supervisory authority where you live.

Children should not use this service to process personal information. We do not knowingly collect account data from children below the age set by applicable law.