Short, because there is little to say.

Privacy

What we store

• A fingerprint of your key. A one-way hash of a token derived from your key. It lets the server know which addresses and agents belong together. It cannot be turned back into your key, and we never receive the key itself.
• Your addresses, with a keyed hash of the site name (not the name), the creation time, and counts of received email. If you label an address, the label is stored encrypted with a key only you hold.
• Email sent to your addresses: sender, subject, text, HTML, attachments, the extracted code or link, the authentication result, and the raw message. When you first open the app, your browser makes a reading key and registers its public half with us; the private half is wrapped with your own key, and we cannot unwrap it. From then on, everything a sender writes is encrypted to your reading key as it arrives. The body and the raw message exist only in that form: we cannot read them, even while the service is running. We keep our own encrypted copy of the sender, subject and the extracted code or link for one hour, so that your agents can fetch the code; then it is wiped and only the copy you can read remains. Mail to keys that have never opened the app (API-only use) is encrypted at rest with a key held outside the database and opened only while answering you or an agent you authorised. Free: deleted 7 days after arrival. Plus: 30 days. You can delete any message, or retire an address and delete all its mail, at any time.
• Agent records: a hash of each agent key, the name you gave it, its rules, and a record of what it asked for and received, kept while the agent exists and for 30 days after.
• Operational data: rate-limit counters by fingerprint, kept for an hour and a day; abuse reports with, if given, the reporter's email, for the life of the case. IP addresses are not written to our storage: where one is needed for rate limiting it is replaced by a one-way hash that changes daily. Our application logs record errors, not requests, and keep no addresses, keys or IP addresses; Cloudflare's own edge logs are covered by its terms.
• Payment records, if you buy Plus or a developer tier: our merchant of record (currently Polar, polar.sh) tells us which plan a key fingerprint has paid for and until when, and the email address used at checkout, which we keep only as a keyed hash: it lets you move a paid plan to a new key by proving that email, and nothing else. The one-time "move your plan" link is the only email we send; it never contains a key. We never see card numbers, and the merchant of record's own privacy policy covers what it holds as the seller of record.

What we do not store

Your key. Your name. Your real email address. A password. Which sites your addresses are for, in readable form. Cookies for tracking. We do not sell, rent or share what we hold, and we do not build profiles from it.

Who else touches it

Cloudflare, Inc. carries the mail, runs the code and holds the data on our behalf, under its own privacy terms. Cloudflare Turnstile runs a silent check when you first use the service. Nobody else: the pages load no fonts, scripts, images or analytics from other companies, so a visit here is not reported to anyone. If we add analytics, it will be cookie-less and aggregate only. When paid plans open, a merchant of record (named on the pricing page and at checkout) processes payments and receives only what is needed to process a payment.

Sponsors

Free screens may show one clearly marked sponsor slot. It is a link we chose, not an advertising network: no trackers, no auction, no pop-ups, nothing inside the code card. Plus removes it.

Your rights

Because we do not know who you are, most requests are things you can do yourself: read what we hold about your key in the app, delete messages, retire addresses, or use Delete everything in Settings, which removes all mail now and the address list. If you want us to erase everything tied to a fingerprint, write to hello@singleusemail.com from a message you send to one of your own addresses, so we can verify you hold the key. Residents of the EU, UK and similar jurisdictions have the additional rights their law grants; we honour them on request.

Children

The service is not for people under 16. We do not knowingly keep data about them, and remove anything we learn of.

Changes

When this page changes in a way that matters, we say so on the home page for 30 days and update the date above.

Terms of use

1. What you get. Receive-only email addresses derived from a key you hold, delivery of mail sent to them, extraction of codes and links, and tools for your agents, as described on this site. We may change or withdraw features with notice on the site; paid features stay for the period you paid for.
2. Your key is your responsibility. Anyone with your key can read the email sent to your addresses. We cannot recover, reset or revoke it. Back it up. If you lose it, the addresses and their mail are lost to you; if it leaks, make a new key and retire what you must.
3. No warranty of delivery. Sending servers and the sites you use decide whether an email reaches us. Some sites block shared domains. We work to keep the pool healthy, but we do not promise that any specific email will arrive or that a specific site will accept an address. Do not rely on a free address for anything you cannot afford to lose access to; Plus with a private domain is the durable option.
4. Retention is a feature. Email is deleted on the schedule your plan states. Addresses persist until you retire them or we retire them for abuse.
5. Paid plans. Prices are shown in USD before local taxes. Paid plans are sold through a merchant of record, currently Polar (polar.sh), which appears on your statement, issues the receipt and handles tax. Subscriptions renew until cancelled; cancel any time and the plan runs to the end of the paid period. Refunds follow the refund policy. App-store purchases follow the store's rules.
6. Agents and API. You are responsible for what your agents and integrations do with the addresses and codes we return, including on third-party sites. Allowances and rate limits apply as published.
7. Abuse. We may retire addresses, pause agents or disable keys used in breach of the acceptable-use rules, without notice where harm is ongoing. Where we can, we tell you why.
8. Liability. The service is provided as is. To the extent the law allows, we are not liable for indirect or consequential loss, and our total liability to you is limited to what you paid us in the twelve months before the claim. Nothing here limits liability that cannot be limited by law.
9. Changes and contact. We may update these terms; material changes are announced on the site for 30 days before they take effect. Questions: hello@singleusemail.com.

Refunds and cancellation

Cancelling

Cancel Plus at any time from Settings in the app or from the link in your receipt. Nothing further is charged, and the plan keeps working until the end of the period you already paid for. There is no cancellation fee and no need to give a reason.

Refunds

• First payment. If Plus is not what you expected, ask within 14 days of your first payment and we refund it in full, no questions asked.
• Renewals. A renewal you did not mean to keep is refunded in full if you ask within 7 days of the renewal date and have not used Plus features since it renewed.
• Something broken. If the service is not working for you and we cannot fix it, we refund the current period, whenever you ask.
• Developer plans and code packs. Monthly API plans follow the same first-payment rule. Pay-as-you-go code packs are refundable while unused, within 30 days of purchase.
• App-store purchases. Plus bought through the App Store or Google Play is refunded by Apple or Google under their rules; we cannot issue those refunds ourselves.

How to ask

Email hello@singleusemail.com with the receipt number or the email address on the receipt. Refunds are processed by Polar, our merchant of record, back to the original payment method, including any tax charged, and usually appear within 5 to 10 business days depending on your bank. Refunding a period ends Plus for that period.

Acceptable use

Use the addresses to keep your real inbox clean, to verify accounts you are entitled to make, to test products you build, and to let your agents finish signups you asked for. Do not use them to:

• Defraud, impersonate, harass, threaten or stalk anyone.
• Create accounts you are not permitted to create, evade a ban, or abuse a service's free tier, trial or promotion at scale.
• Receive, store or distribute illegal content, including anything that sexualises minors, which we report.
• Receive credentials or codes for accounts that are not yours, or interfere with another person's access.
• Probe, overload or reverse-engineer the service beyond the published API, or resell access without an agreement.

We never provide phone numbers or SMS, and we do not accept requests for them. Site owners who want their service excluded from receiving our addresses can ask via the contact page and we will act within a business day.