Privacy notice

Last updated: 28 October 2026. This notice explains what 1hemail.com stores and why. It describes how the service is built; it is not legal advice.

What is stored

• Inbox record: an inbox identifier, a hash of your private access token, the temporary address, and the expiry time.
• Messages: the text of up to 30 recent messages received by that address. HTML is reduced to text, and attachments are not kept for download.
• Rate-limit record: a hash of your IP address and a count of inbox creations in the current hour. The raw IP address is not stored in this record.
• Payment record: for an extension, the Stripe checkout or PayPal order identifier and whether the payment was confirmed. We do not receive card numbers.

Your access token

When you create an inbox, your browser keeps the address and a private access token in session storage. Anyone with that token can read the inbox, so avoid shared devices. The server keeps only a hash of the token and compares it when you load your inbox. If you lose the token, the inbox cannot be recovered.

How long it is kept

Inbox records and messages are removed in the background after the inbox expires, which is 60 minutes after creation or 2 hours after a paid extension. Removal happens within a short cleanup cycle, so there can be a small delay. Rate-limit records hold only the current hour’s count and are overwritten as new requests arrive.

Human verification

Creating an inbox requires a check by Cloudflare Turnstile. Cloudflare processes the check under its own privacy policy and may set cookies needed for that check.

Payments

The optional extension is processed by Stripe or PayPal. Those providers collect payment details under their own terms and privacy policies. 1hemail.com receives only the payment status it needs to extend your inbox.

Storage in your browser

The service uses session storage for your inbox and local storage for your light or dark theme choice. Nothing is sent to an advertising network by this page.

Server logs

The web server keeps standard access logs, which can include IP addresses, for keeping the service running and protecting it from abuse. These logs are separate from inbox records.

Email you receive

Messages sent to a temporary address are stored as described above. Do not rely on the service to hold anything. Save what you need before the hour ends.

Questions

For questions about the service, see the contact page on RichScripts. The home page explains how to use the inbox.