Privacy Policy
Last updated: 10/29/2026
What TempMailer is
TempMailer is a self-hosted email sandbox. It exists to catch outbound test email your own application sends so you can inspect it, not to deliver mail to real people.
Account data
We store the name, username, email, and password (hashed) you give us when you register or when an admin creates your account. We use this only to authenticate you and to send you account-related email (verification codes, password resets).
Sandboxed mail content
Any email sent to a mailbox you or your admin created is stored so you can view it — subject, body, headers, attachments. This content is isolated per workspace; other tenants on the same instance cannot see it. SMTP credential passwords are stored reversibly (not hashed) because you need to read them back to configure a mail client — they are never displayed to anyone but the workspace owner and users explicitly assigned to that workspace.
Shared mail links
If you use the Share feature on a mail, a temporary link is created that expires 2 hours after creation (or sooner, at your account's per-user share limit). Anyone with that link — and the access code, if you set one — can view that single mail until it expires.
What we don't do
We don't sell or share your data with third parties, and we don't use mail content for anything beyond displaying it back to you. This is a testing tool, not an analytics product.
Deletion
You can delete individual mail, workspaces, or your own account data through the app. Deleting a workspace deletes all mail stored in it.
Questions
This instance is run by the site operator shown in the footer. Reach out to them directly with any privacy questions about this specific deployment.