Updated · Volt Ghost team
1. What we store, and for how long
| Data | Why | Kept until |
|---|---|---|
| Your temporary address, when it was created, when it expires, whether you used the free extension | To run the inbox | The inbox expires (24 h, or up to 7 days after an extension). Removed by the hourly cleanup |
| Messages sent to your address: sender, subject, text and HTML content, message ID, time received | To show them to you | The inbox expires. Removed by the hourly cleanup |
| Attachments | Not stored | Never kept |
We don't ask for your name, real email address, phone number or payment details.
2. Stored in your browser
- Local storage: your current inbox (address and recovery token), which messages you've opened, your preferred address style, and whether you've dismissed the "keep this inbox" reminder. It stays until you clear your browser data.
- Session storage: a short-lived bot-check session (up to 30 minutes) so you don't have to repeat the check for every new address.
- Offline cache: if your browser supports it, the site's pages, styles and icons are cached so it loads faster and works offline. Inbox contents and recovery links are never cached.
We don't set advertising or tracking cookies.
3. IP addresses and security
Your IP address is used to apply rate limits, which are kept in server memory and not written to our database. It's also sent to Cloudflare Turnstile to check that a human is creating the address. Like any website, our hosting providers may keep short-lived technical logs (IP address, time, URL requested) for security and reliability, under their own policies.
4. Analytics
We may use Cloudflare Web Analytics to count visits and page views. It's cookieless and doesn't build a profile of you. We only look at totals: pages, referrers and countries.
5. Who processes data for us
- Cloudflare: receives email for our domains, hosts the website, runs the bot check and (if enabled) analytics.
- Render: runs our API server.
- Neon: hosts the database that stores inboxes and messages until they expire.
We don't sell personal data, and we don't share it except with these providers to run the service, or when the law requires it.
6. Your choices
- Stop using an address at any time. It and its messages are deleted when it expires.
- Clear your browser's site data to remove everything stored on your device.
- Anyone with your recovery link can read the inbox until it expires, so keep it private.
7. Children
Volt Ghost isn't meant for children under 13 (or the minimum age in your country).
8. Changes and contact
If this policy changes, we'll update the date at the top of this page. Questions: [email protected].