Privacy Policy

NukeMail is built around privacy. We created this service specifically so you can receive emails without giving away your identity. This policy explains exactly what data we handle, how we handle it and (more importantly) what we don't do. See also our Terms of Service.

We collect only what's necessary to run the service:

That's it. Nothing else.

We want to be very explicit about this:

Both cookies are first-party and strictly necessary, and neither is used for tracking. They are the only cookies NukeMail sets. The Google AdSense script loads on every page, for free and Premium users alike, and Google may set its own cookies (see Advertising below). Cloudflare Web Analytics, which we use to count page views, doesn't use cookies.

Permanently deleted means gone from our database. For disaster recovery we keep encrypted database backups for up to 3 weeks, so deleted data can remain in those backups until they expire. Backups are only ever used to restore the service after a failure, never to recover individual inboxes.

We use a small number of external services to run NukeMail:

Some of these services may process data outside of your country. By using NukeMail, you acknowledge that your data may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

NukeMail is paid for partly by ads. Here's how that works:

You can delete your inbox and all associated data at any time using the “Delete Inbox” button. Deletion is immediate and permanent, apart from the 30-day address hold described above. If you don't delete manually, your data is automatically removed after the retention period described above. For any privacy-related questions, reach out via our contact page.

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:

Our legal basis for processing is legitimate interest (providing the service you requested). For advertising, we rely on consent where required. Contact us via our contact page for any GDPR-related requests.

Under the California Consumer Privacy Act, California residents have the right to know what personal information is collected, request deletion of their data and opt out of the sale of personal information. NukeMail doesn't sell personal information. You can delete all your data at any time using the Delete button in your inbox.

We will only disclose user data to law enforcement when legally compelled by a valid court order or subpoena. Given our minimal data collection and automatic deletion schedule, there is very little data to disclose in most cases. We will notify affected users where legally permitted to do so.

NukeMail isn't intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has used our service, please contact us and we will delete the associated data.

We may update this policy from time to time. The “Last updated” date at the top of this page reflects any changes. Continued use of NukeMail after changes constitutes acceptance of the updated policy.

Questions about this privacy policy? Reach out via our contact page.