Privacy Policy

1. Data We Collect

1.1 Disposable Email Addresses

When you generate a disposable email address through our service, we collect and store:

• Email Address: The disposable address you generated (on the @unkn0wn.qzz.io or @phant0m.qzz.io domains). We generate a fresh, human-looking username each time and keep no history of previously generated addresses.
• Email Content: The emails received at your address (and, for accounts, mail you send)
• Retention Period: Free addresses self-destruct 1 hour after generation and hold up to 10 emails (the oldest is dropped past 10). Premium emails are retained for 15 days, up to 45 per address (30 inbox + 15 starred).

1.2 User Account Data (Optional)

If you create an account or use Premium features, we collect:

• Username: Your chosen username
• Password: Encrypted and hashed - we cannot see your password
• Email (Optional): Only if you provide it - used for account purposes only
• Premium Status: Whether you have an active Premium subscription
• Saved Addresses: Addresses you've kept on file (1 on Free, up to 15 on Premium)
• Custom Handle / Domain Choice: Your chosen handle and preferred domain (Premium only)
• Forwarding Rules: Email forwarding preferences (Premium only)
• Address Ownership Keys: A public Ed25519 key reference used to prove ownership when re-claiming a previously generated address. We never see your private key.

1.3 Technical Data

We automatically process certain technical information via Cloudflare infrastructure:

• No Raw IP Storage: We do not store your raw IP address. For abuse protection and rate-limiting we use short-lived, hashed/derived counters only — never a readable IP tied to your activity.
• Browser Information: User agent and device information, used transiently for security
• Access Logs: Standard edge request metadata handled by Cloudflare
• API Usage: For Developer API keys, per-key request counts for rate limiting (10/day receive on Free, 500 receive + 50 send on Premium)

2. How We Use Your Data

We use the minimal data we collect exclusively for these purposes:

• Service Delivery: To provide temporary email services and deliver emails to you
• Account Management: To manage your account and Premium subscription
• Security: To prevent abuse and spam - we protect our service, not monitor your usage
• Rate Limiting: To enforce API limits (Free: 10 receive/day, sending blocked; Premium: 500 receive + 50 send/day) plus fair-use / abuse-protection thresholds
• Sending Mail: Sending requires an account (anonymous sending is disabled); we process the sender, recipient, and message to deliver it

What we DON'T do: We do not track your browsing behavior, monitor your email content, analyze your usage patterns for advertising, or share any data with third parties for marketing or law enforcement purposes.

3. Data Retention

• Free Addresses: Self-destruct 1 hour after generation; hold up to 10 emails
• Premium Emails: Retained for 15 days, then automatically deleted; up to 45 per address (30 inbox + 15 starred)
• Saved Addresses: Retained as long as your account is active (1 on Free, up to 15 on Premium)
• Account Data: Retained until you delete your account
• Rate-limit Counters: Short-lived counters that reset on their own; we keep no readable IP history

4. Third Parties

We respect your privacy and do not sell, rent, or share your personal data with anyone - not for marketing, not for law enforcement, not for any purpose. We use a small set of infrastructure providers strictly to operate the service:

• Cloudflare: Our core infrastructure — Pages, Workers, KV, R2 object storage, and Email Routing. All data is processed on Cloudflare's edge network. See Cloudflare's Privacy Policy.
• Pusher: Powers real-time inbox push so new mail appears instantly. Only minimal channel/event data is relayed; no email content is stored by Pusher.
• Resend: Handles transactional and outbound email delivery (e.g. sending mail from your address, verification codes).
• NOWPayments: Processes Premium crypto payments. Payment metadata is handled by NOWPayments; we do not receive or store your wallet details.

Important: We have no ability to monitor your specific usage or share your information with authorities. We cannot see what you're doing with our service - by design.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (HTTPS/TLS)
• Password Hashing: Passwords are hashed using strong cryptographic algorithms
• Access Control: Strict access controls on our infrastructure
• Automatic Deletion: Temporary data is automatically purged according to retention policies

6. Your Rights

You have the following rights regarding your data:

• Access: View your account data through your profile page
• Deletion: Delete your account and all associated data at any time
• Correction: Update your account information as needed
• Data Export: Request a copy of your data by contacting us

7. Cookies

We believe in transparency. Here's what we use for essential functionality:

• Session Storage: localStorage to keep you logged in during your session
• No Tracking Cookies: We do not use any tracking, advertising, or analytics cookies
• No Third-Party Trackers: We do not embed any third-party tracking scripts or pixels

8. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect data from children under 13.

9. International Data Transfers

Your data is stored on Cloudflare's global network and may be processed in multiple countries. By using our service, you consent to this transfer and processing.

10. Changes to This Policy

We may update this privacy policy from time to time. The "Last Updated" date at the top of this page indicates when the policy was last revised. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us:

• Support Email: support@unkn0wn.qzz.io
• Website: mail.unknowns.app