Privacy Policy

1. Overview

Iwanta.email is a disposable email service designed with privacy at its core. We collect the absolute minimum data required to operate the service and automatically delete all information after a defined retention period.

2. Data We Collect

When you use Iwanta.email, the following data is stored:

• Email content — Incoming emails (sender, subject, body, headers) sent to your generated address.
• Generated addresses — The temporary email addresses you create. The site's administrators can see a list of the 100 most recently created addresses with the time each was made; older entries drop off it as new ones are added.
• IP address (abuse prevention) — A counter of how many new mailboxes your IP address opened, used to limit abuse. It is deleted automatically after one hour and never written to logs.
• Account (only if you register) — The ID that Google, Discord or GitHub gives your account (not your name, email or photo), your username, the permanent addresses you claim, and your logged-in devices (browser and operating system name, sign-in and last-active times). If you turn on Discord alerts, the webhook URL you give us; each alert sends that Discord channel the sender and subject of a new email, never its contents.
• In your browser only — Your alert settings and the temporary inboxes you opened recently, each forgotten when that inbox closes. These never leave your device.
• Usage totals — Anonymous daily counts, such as emails received, page views per page, visitors per country, the websites that linked visitors here and an estimated number of unique visitors. Visitors are estimated from a one-way hash of the IP address that can't be turned back into the address or linked to you. The totals are deleted after 31 days.

3. Data We Do Not Collect

• No personal identification information (name, real email, phone number), even when you sign in with Google, Discord or GitHub
• No IP address logs or history
• No analytics, advertising or tracking cookies, and no per-visitor history
• No third-party tracking scripts

4. Data Retention

Each temporary mailbox closes automatically when its timer runs out, and every email in it is permanently deleted at the same moment. Emails to a permanent address are deleted 30 days after they arrive, or sooner if you delete them. Logged-in devices are signed out after 30 days without use. Your account and claimed addresses are kept until you delete them; deleting your account removes all of its data immediately. Deleted data cannot be recovered.

5. Third Parties

We do not sell, share, or transfer any data to third parties. Email content is stored exclusively in our infrastructure and is never accessed for advertising, profiling, or any purpose other than displaying it to you. The website is delivered through Cloudflare, which processes connection data such as IP addresses to serve and protect the site. If you sign in with Google, Discord or GitHub, that provider knows you signed in to Iwanta.email; we only ask it for your account ID.

6. Cookies

Iwanta.email only sets cookies when you sign in: one that keeps you logged in (for up to 30 days) and a short-lived one that protects the sign-in from forgery. No tracking cookies. Cloudflare may set a strictly necessary security cookie to filter bot traffic.

7. Changes to This Policy

We may update this policy from time to time. Changes will be reflected on this page with an updated revision date.