OneTempMail Extension — Privacy Policy
Last updated: 2026-06-04
This policy covers the OneTempMail browser extension for Chrome, Edge, Brave, Opera, and Firefox. For the website’s separate policy, see privacy-policy.
What we collect
The extension connects to the public OneTempMail API at https://onetempmail.com/api/v1 to generate temporary email addresses and fetch messages sent to them.
Locally in your browser (via chrome.storage.local) we store:
- The currently generated temporary email address (so it persists between popup opens).
- A short list of recently seen email IDs, capped at the 100 most recent, used only to detect whether a message is new for the desktop notification.
- Your extension preferences (notifications on/off, polling interval, preferred domain) via
chrome.storage.sync.
We do not collect, transmit, or store any of the following:
- Your real email address, name, phone number, or any personal identifier.
- Browsing history, open tabs, cookies, or data from websites you visit.
- Keystrokes, form values, or page content from any site other than messages delivered to the temporary inbox you explicitly created.
What the OneTempMail server sees
The server receives:
- The public API request needed to generate an address and fetch that address’s inbox.
- Inbound emails sent to the temporary address you generated, which are held on the server long enough to be delivered to your popup and then purged on a rolling schedule.
The server does not require an account and does not log IP addresses with personally identifying metadata.
Why each permission is requested
| Permission | Used for |
|---|---|
storage | Remembering your current temporary address between popup opens. |
alarms | Polling the inbox on your chosen interval in the background. |
notifications | Showing a desktop notification when a new email arrives. |
clipboardWrite | Copying the temporary email address to your clipboard when you press Copy. |
contextMenus | Adding “Fill with temporary email” to the right-click menu on editable fields. |
activeTab + scripting | Activated only after you click the context-menu item, so we can fill the focused input on that tab with the temporary address. We never read page contents. |
host_permissions: https://onetempmail.com/* | The only origin the extension talks to — the OneTempMail API. |
Remote code
The extension loads no remote JavaScript. DOMPurify is bundled locally in lib/dompurify.min.js. The content security policy restricts scripts to 'self' only.
Data sharing
We do not sell, rent, or share extension data with third parties. We do not use analytics, trackers, or advertising SDKs.
Your controls
- Generate a new address at any time to discard the previous one from local storage.
- Clear all local data from the extension’s Settings page.
- Uninstall the extension to erase all locally stored data instantly.
- Delete individual messages from the popup; this issues a DELETE to the server for that message.
Data retention
Emails delivered to a temporary address are stored on the server only long enough to be delivered to your popup and are then purged automatically. The extension itself does not persist message bodies on your device.
Children’s privacy
The extension is not intended for children under 13. We do not knowingly collect information from children.
Changes to this policy
We may update this privacy policy over time. Material changes will be reflected here and in the extension’s store listing. The “Last updated” date above always reflects the most recent revision.
Contact
For privacy questions or deletion requests, email [email protected], or visit our support page.