🔒 Privacy Policy

1. Welcome to EasyTrashMail

Privacy matters! EasyTrashMail is a temporary email service that protects your privacy. This privacy policy explains how we process your data when you use our service.

2. What Data Do We Collect?

2.1 For Free Users (No Registration)

As a guest, we collect minimal data:

• Temporary Email Addresses: Randomly generated, no personal data
• Session Data: Stored in your browser (localStorage/sessionStorage)
• IP Address: For security and abuse prevention (anonymized after 7 days)
• Browser Information: To optimize website display
• Received Emails: Automatically deleted after 10 minutes

2.2 For Premium Users (With Registration)

If you register for Premium, we additionally collect:

• Email Address: For login and important service notifications
• Account Settings: Your preferences and saved email addresses
• Payment Information: Via secure payment providers (Stripe, PayPal)
• Usage Statistics: Number of emails created, storage used

2.3 Firebase & Google Services

We use Firebase (Google) for:

• Authentication: Secure login for Premium users
• Firestore Database: Storage of your email addresses and settings
• Firebase Hosting: Fast and reliable service delivery
• Analytics: Anonymized usage statistics for service improvement

2.4 TechWeld API Integration

We use TechWeld API for:

• Email Infrastructure: Reliable email receiving and processing
• Domain Management: Temporary email domain handling
• Message Processing: Real-time email delivery

3. How Do We Use Your Data?

Your data is used exclusively for the following purposes:

• Service Delivery: Receive and display temporary emails
• Account Management: For Premium users (login, settings, billing)
• Security: Protection against spam, abuse, and cyber attacks
• Improvements: Analyze usage patterns for service optimization
• Communication: Important updates, security warnings (only for registered users)
• Legal Obligations: Compliance with GDPR and other laws

4. Automatic Data Deletion

The core of our service is the temporary nature of emails:

• Free Users: Emails automatically deleted after 10 minutes
• Premium Users: Selectable retention from 1 hour to 30 days
• Inactive Addresses: Automatically deleted after 7 days of non-use
• Deleted Accounts: All associated data removed within 30 days

5. Cookies & Tracking

We use cookies sparingly and transparently. Details in our Cookie Policy.

5.1 Essential Cookies

• session_id: Session management (Duration: Session)
• auth_token: Login status for Premium users (7 days)
• csrf_token: Security protection (Session)

5.2 Analytics Cookies (Optional)

• Google Analytics: Anonymized usage statistics
• Firebase Analytics: Performance monitoring

You can disable analytics cookies anytime in your browser settings!

6. Data Sharing & Third Parties

We only share your data with trusted partners who help us provide the service:

6.1 Service Providers

• Google Firebase: Hosting, database, authentication (USA/EU - GDPR compliant)
• TechWeld API: Email infrastructure and processing (Germany)
• Stripe/PayPal: Payment processing (PCI-DSS certified)
• Cloudflare: DDoS protection and CDN (global)

6.2 Legal Requirements

We may disclose data in case of:

• Valid court orders
• Government requests (law enforcement)
• Protection of our rights and safety
• Prevention of fraud or illegal activities

7. Your Privacy Rights (GDPR)

As an EU citizen, you have extensive rights:

• Right to Access: What data do we have about you?
• Right to Rectification: Correction of incorrect data
• Right to Erasure: "Right to be forgotten"
• Data Portability: Export your data in a common format
• Right to Object: Object to data processing
• Right to Restriction: Restrict processing
• Withdraw Consent: Where processing is based on consent

8. Data Security

We take security seriously and implement modern protection measures:

• HTTPS/TLS 1.3: Encrypted transmission of all data
• Bcrypt Hashing: Secure password storage (irreversible)
• Firestore Security Rules: Strict access controls
• DDoS Protection: Cloudflare against attacks
• Regular Updates: Security patches and audits
• Backup Strategy: Daily encrypted backups
• 2FA: Two-factor authentication for Premium (coming soon!)

9. International Data Transfer

Our servers are primarily in Germany and the EU. Some services use US servers:

• EU Standard Contractual Clauses: For transfers outside the EU
• Privacy Shield Successor: Adequate level of protection
• Firebase (Google): EU region preferred, GDPR compliant

10. Children & Minors

EasyTrashMail is designed for users 16 years and older. We knowingly don't collect data from children under 16. If you're a parent and believe your child has given us data, contact us immediately: privacy@easytrashmail.eu

11. Premium Subscription & Payments

11.1 Payment Processing

• Payments via secure providers (Stripe, PayPal)
• We DON'T store credit card data directly
• Only transaction IDs and status are stored

11.2 Invoices & Tax

• Invoices by email (PDF)
• Retention according to tax law (10 years)
• Name, address for invoice (optional for business customers)

12. Changes to This Privacy Policy

We may occasionally update this policy. For significant changes, we'll inform you:

• Update of "Last Updated" date
• Banner notice on the website
• Email notification for Premium users

Your continued use after changes constitutes acceptance.

13. Contact & Data Protection Officer

Questions, concerns, or exercising your rights? Contact us:

14. Supervisory Authority

You have the right to file a complaint with your data protection authority. For Germany:

15. Related Information

For comprehensive information, also read:

• Terms of Use - Rules for using the service
• Cookie Policy - Detailed cookie information