Last updated: August 20, 2026Privacy Policy
Privacy Policy
Clear data boundaries
This policy explains what information MsgFwd processes when providing disposable inboxes and email forwarding, why we process it, and when we delete it. By using the service, you confirm that you have read these rules. If you disagree, stop using the service and let the temporary address expire naturally.
| Data category | Purpose | Typical retention | Boundary |
|---|---|---|---|
| Temporary addresses and emails | Receiving, displaying, and abuse prevention | While the address is active, up to 24 hours | Cannot be used for account recovery after expiration |
| Forwarding aliases and settings | Ongoing forwarding and user control | While the account remains active | Future forwarding stops when the alias is deleted |
| Forwarded email archives | Delivery troubleshooting, retries, and non-spam handling | Usually no more than 30 days | Not a permanent backup |
| Security and access logs | Attack prevention, rate limiting, and troubleshooting | Retained briefly as needed for security | Access restricted and deleted on schedule |
How we process information
1. Scope
This policy applies to the disposable email, forwarding, authentication, archiving, and support communications provided by msgfwd.com. When third-party websites send email to your address, their own policies govern their data processing.
Links, tracking pixels, or attachments in emails may connect to third-party services. We make reasonable efforts to limit harmful content, but we do not treat third-party actions as processing by MsgFwd.
2. Information we collect
Disposable inboxes process generated addresses, email envelopes, subjects, message bodies, attachments, and arrival times so incoming messages can be displayed while the address is active. Forwarding also processes your login email, aliases, forwarding status, authentication results, and archives from the past 30 days.
To maintain security and availability, servers may record IP addresses, timestamps, browser identifiers, request paths, response statuses, and anti-abuse signals. We do not require disposable inbox users to submit their names or create an account.
3. Purposes and legal bases
We receive, display, and forward email at your request, and use rate limiting, troubleshooting, and abuse detection to protect the service. Login verification codes and 2FA information confirm control of an account; they are not used for advertising profiles.
Where applicable law requires a legal basis, processing may rely on providing the service, legitimate security interests, legal obligations, or your explicit choice. You can stop using short-term features at any time or manage long-term aliases in the dashboard.
4. Disposable email retention
New addresses are active for 3 hours by default and can be extended, but their total lifetime cannot exceed 24 hours. When an address expires or is replaced, related emails enter the deletion process and cannot be guaranteed to be recoverable.
Do not use temporary addresses to store payment records, government documents, medical records, or long-term account recovery information. The product’s short-term nature is a clear boundary, not a promise of permanent storage.
5. Forwarding and archives
While a forwarding alias exists, the system must retain its route to your login email and its active or paused status. You can pause, resume, or delete an alias. Deletion affects future messages but does not recall copies that have already been delivered.
Email archives are usually retained for no more than 30 days for viewing, forwarding retries, and marking messages as non-spam. This is not a backup service; important information should be stored in an email account you control.
6. Cookies and local storage
The site may use necessary browser storage for a temporary email identifier, session token, login email, and the cooldown period for sending verification codes. This helps continue the current task after a refresh, prevent duplicate requests, and maintain authentication status.
We do not manually add third-party analytics code to pages. If the deployment environment legally enables analytics or consent tools, we will provide the relevant notice and choices as required.
7. Sharing and processors
We do not sell or rent personal information, and we do not sell email content. To provide hosting, delivery, security, and support, necessary data may be processed on our behalf by infrastructure and email service providers under contractual restrictions.
We may also disclose the minimum information necessary to comply with valid legal demands, protect users and the public, investigate attacks, or enforce our terms. We do not hand over data casually in response to informal requests.
8. International transfers
Internet email may be routed across regions, and infrastructure may be located outside your country. When processing involves international transfers, we use contractual safeguards, access controls, or other protections recognized by applicable law.
Protection standards may differ between regions. You should not use a disposable inbox to transmit materials subject to industry rules that require storage in a specific jurisdiction.
9. Security measures
We use measures such as encryption in transit, access separation, rate limiting, log reviews, and two-factor authentication to reduce the risk of unauthorized access. No online service can guarantee absolute security, so do not send secret keys or highly sensitive information through a disposable inbox.
If you notice suspicious access, stop using the affected address, change the credentials for the linked account, and contact support@msgfwd.com. Responsible disclosures should include reproduction steps, but never attach real email content belonging to unrelated users.
10. Your rights
Depending on where you live, you may have the right to request access to, correction or deletion of, restriction of, or objection to the processing of your personal information, as well as a copy of it. Temporary data has a short lifetime and may already have been deleted through normal processes before we receive your request.
When submitting a request, use an email address that can verify your control and describe your region, feature, and request scope. We will carry out necessary verification and respond within the legally required period, or explain why we cannot comply.
11. Children and restricted uses
The service is not intended for children below the applicable local age of digital consent, nor for bypassing lawful protections put in place by schools, guardians, or platforms. We do not knowingly collect personal information from children.
If a guardian believes a child has provided us with information, they can contact support. After verification, we will take steps to delete or restrict it where permitted by law.
12. Changes, contact, and complaints
We may update this policy when our product, legal requirements, or security practices change, and will show the date at the top of the page. Significant changes will be communicated in a reasonable manner. Continued use of the updated service means you accept the new version, but it does not retroactively change explicit commitments already made.
For privacy questions, contact support@msgfwd.com. If you believe our processing violates the law, you may also complain to the data protection authority with jurisdiction where you live.