Privacy Policy

1. Our approach

PrivySuite is built to collect as little as possible. There are no user accounts, no signup, and no advertising or analytics profiles tied to your identity. The data the Service touches is temporary by design and is automatically deleted after short retention windows described below.

2. What we handle

• Temporary email messages sent to an address you generate, stored only so you can read them in your live inbox.
• SMS messages received on a public virtual number, shown so you can read verification codes.
• Burner content you create, stored encrypted and deleted the moment it is opened (or when it expires).
• A limited technical record — such as your IP address for a short period — used only to rate-limit abuse. We do not build advertising profiles from it.

3. How long we keep it

Data is purged automatically on these schedules:

• Temporary inboxes and their messages: deleted when the session expires (around 45 minutes).
• Burner messages: deleted immediately on first open, or at their chosen expiry (1 hour to 7 days) if never opened.
• Received SMS: removed within about 24 hours.
• Anti-abuse technical records: removed within a couple of hours.

Once deleted, data cannot be recovered.

4. How we use it

Solely to operate the Service: to show you messages and codes, to make burner links work, and to prevent spam and abuse. We do not sell your data, and we do not use it for advertising or tracking across other sites.

5. Local storage in your browser

To keep your temporary email available if you refresh the page, the Service stores your current address and its expiry time in your browser's local storage. This stays on your device, is not a tracking cookie, and clears when the session expires or you clear your browser data.

6. Third parties

To deliver SMS, the Service may rely on a telecommunications provider (for example, Twilio), which processes the messages it routes under its own privacy terms. The Service is hosted by a third-party hosting provider. We share data with these providers only as needed to run the Service.

7. Security

Burner content is encrypted at rest, message data is handled over encrypted connections, and stored data is short-lived. No system is perfectly secure, however, and because temporary addresses are public or semi-public, you should never send anything through the Service that must remain confidential.

8. Children

The Service is not directed to children and is not intended for anyone under the age permitted to form a binding agreement in their jurisdiction. Do not use the Service if you are below that age.

9. Changes

We may update this Policy. The "Last updated" date above reflects the current version; continued use after a change means you accept it.

6. Third parties

To deliver SMS, the Service may rely on a telecommunications provider (for example, Twilio), which processes the messages it routes under its own privacy terms. The Service is hosted by a third-party hosting provider. We share data with these providers only as needed to run the Service.

PrivySuite is free and supported by third-party advertising (Google AdSense). These ad providers may set cookies or use similar technologies to display and measure ads, which can involve collecting data such as your device and approximate location. We do not sell your personal data, and our own tools remain no-account and auto-deleting. To opt out of personalized advertising, use your browser or ad settings, or the ad provider's opt-out page. We also use privacy-focused analytics (Google Analytics, configured with IP anonymization and ad-personalization disabled) to understand general site usage.