🔐 Security & Privacy
Email validation without compromising user privacy.
TempMailChecker is built for businesses that take data protection seriously.
🧾 What data we process
TempMailChecker only needs the domain part of an email to determine if it's disposable.
When you call our API:
We internally convert this request to:
We never store, log, or inspect the full email address.
🗂 What we do NOT collect
We do not store:
- Full email addresses
- Usernames / first name / last name
- IP addresses
- User agent strings
- Referrer headers
- Request contents beyond the domain
- Email content of any kind
We also do not share data with any third parties.
🧠 What we DO store
To enforce daily quotas fairly and detect abuse, we store:
| Data | Reason |
|---|---|
| API key hash | Identify your account securely |
| Email (from signup form only) | Send onboarding + limit alerts |
| Request count per day | Reset quota at midnight UTC |
We do not store request history.
🔒 API key security
- API keys are hashed (bcrypt) before storage
- Keys are never logged
- Keys are never shown again after creation
- You can regenerate your key instantly at any time
🔎 Logging
API request logs contain zero sensitive information.
A typical request log looks like:
No emails. No domains. No metadata tied to your users.
🔐 Transport security
- HTTPS enforced (TLS 1.2+)
- HTTP requests are permanently redirected to HTTPS
- HSTS enabled
🌍 GDPR / CCPA Friendly
Because we don't store personal data, TempMailChecker is naturally compliant with:
*Email validation context only
No DPA is required, because no personal data is retained.
🧯 Data retention
We retain only:
| Data | Retention |
|---|---|
| API usage counters | Reset daily |
| API signup email | Until deletion request |
You can delete your account fully at any time.
🛡 Responsible Disclosure
Found a vulnerability?
Email us at security@tempmailchecker.com — we respond within 24 hours.
Bug bounties will be added after public launch.
🧘 Summary
For non-technical decision-makers:
| Concern | Status |
|---|---|
| Do you store full emails? | ❌ No |
| Can you see my users? | ❌ No |
| Do you sell or share data? | ❌ Never |
| Is everything encrypted? | ✅ Yes |
| Is TempMailChecker GDPR-compliant? | ✅ Yes |
| Do we need a DPA? | ❌ No personal data stored |
Block disposable emails without storing user data.
Get your free API key — 100 requests/day, no credit card.
🚀 Get Free API Key