Cookie and browser-storage policy

Draft for owner/legal review before production. Last updated 18 August 2026.

Essential security cookie

The API may set the host-only cookie __Host-gettemp_anon for abuse prevention and distributed rate limiting. It is HTTP-only, Secure, SameSite Strict, unavailable to frontend JavaScript, and expires after 24 hours. It is not used for advertising.

Inbox session storage

The browser stores the temporary inbox session locally so a reload can recover access until expiry. It contains the generated address, inbox identifier, access secret, and expiry time. The app removes it when you discard the inbox or the session expires.

Analytics storage

Production PostHog analytics is currently disabled. If explicitly enabled after privacy review, the prepared adapter uses a random tab-scoped identifier in sessionStorage and rejects inbox addresses, senders, subjects, message content, OTPs, access tokens, and tokenized links.

Managing storage

You can clear site data through your browser. Blocking the essential API cookie may reduce abuse-control accuracy. The core mailbox must continue to work when optional analytics is blocked.

Changes

This page must be updated before enabling a new analytics, advertising, embedded-content, or consent provider.