Privacy Policy
This policy explains what MailsByte collects, why, how long we keep it, and how to reach us. The service is a short-lived disposable inbox. It is not an anonymous or “zero log” product.
1. Who we are
MailsByte is operated by Ajistudio. The public website is https://mailsbyte.me. Incoming mail is accepted only for addresses on mailsbyte.online and temp.mailsbyte.me.
Privacy: privacy@mailsbyte.me
Abuse: abuse@mailsbyte.me
2. What we collect
If you use the site without signing in
- The temporary address we created and when it expires
- Messages sent to that address (sender, subject, body, attachments, time received)
- A short-lived cookie so your browser can open that inbox
- Your IP address for rate limits and abuse prevention
- Advertising data described in section 5
If you create an account
- Username, optional email, and a password you choose (stored so that we cannot read the password back)
- Google account id and email if you sign in with Google
- Your inboxes, API keys (shown once, then only a masked copy), and optional VirusTotal key if you paste one
- A signed-in session cookie (about 30 days, or until you sign out)
We do not ask for a government ID, phone number, or payment card.
3. How disposable mail is handled
When someone sends mail to your temporary address, we store it so you can read it in the inbox. Anyone who knows the address can send mail to it. Treat it like a shared postcard, not a vault. Do not use it for medical, banking, or long-term secrets.
| Use | Active inboxes | Lifetime | Ads |
|---|---|---|---|
| Guest | 1 | 30 minutes | Yes |
| Signed-in free | 2 | 30 minutes | Yes |
4. Accounts and Google sign-in
An account is optional. If you use Google sign-in, Google confirms who you are and sends us a user id and email so we can open a MailsByte session. We cannot read your Gmail and we cannot send mail as you.
You can sign out at any time. If you ask us to delete your account, we remove the account, sessions, API keys, and ownership of live inboxes.
5. Advertising (Google AdSense)
The free website is supported by Google AdSense. That is how the service stays free. Ads may appear on the home page, the free inbox, and other public pages.
We do not place ads inside the email you received. We do not sell message contents to advertisers.
When an ad loads, Google and its partners may process:
- the page address and that you visited MailsByte
- IP address, browser type, language, and approximate location
- advertising cookies or similar identifiers
- whether an ad was shown or clicked
Google is responsible for that advertising data. See the Google Privacy Policy and How Google uses information from sites that use its services.
You can limit personalized ads here:
Turning off personalization does not remove ads from the free site. Ads will still use the page topic and basic technical data.
6. Cookies and similar storage
- Session cookie — keeps you signed in.
- Inbox cookie — remembers the current temporary address while it is alive.
- Local preferences — language, theme, and similar settings in your browser.
- Google advertising cookies — set by AdSense for serving and measuring ads.
You can delete cookies and site data in your browser. Signing out clears the session cookie we set.
7. Optional VirusTotal scans
Scanning a link or file is optional. If you start a scan, we send that URL or file to VirusTotal so it can check it. VirusTotal has its own privacy policy.
8. Who we share data with
- Google AdSense, when ads load on a free page
- Google sign-in, only if you choose that button
- VirusTotal, only if you start a scan
- The hosting provider that runs the website and incoming mail
We do not sell inbox contents or rent a user list. We may disclose a specific inbox or account if required by law or to stop ongoing abuse.
9. How long we keep data
- Guest and free inboxes, and their messages — until the 30-minute timer ends or you delete the inbox
- Account information — until you delete the account or we close it for abuse
- Session cookie — about 30 days, or when you sign out
- Rate-limit counters — minutes to a few hours
- Advertising cookies — controlled by Google
10. Your rights
Depending on where you live, you may ask to access, correct, or delete personal data we hold, or to object to some processing.
- Delete an inbox in the app to remove that mailbox now
- Sign out and clear site data to drop cookies we set
- Revoke API keys in your account
- Email privacy@mailsbyte.me to request account deletion
11. Children
The service is for people 16 or older (or the digital-consent age in your country, if higher). We do not knowingly create accounts for children. If you believe a child registered, contact us and we will delete the account.
12. Security
The site is served over HTTPS. Passwords are stored in a form we cannot read back. If you publish a disposable address, anyone can send mail to it. If you share a session or API key, the other person can use that inbox. Let inboxes expire when you are done.
13. Contact
Privacy: privacy@mailsbyte.me
Abuse: abuse@mailsbyte.me
General: hello@mailsbyte.me
Website: https://mailsbyte.me
If we change this policy in a material way, we will update the date at the top.