Legal · Privacy Policy
Privacy Policy
Transparency is our core value. Please read this document carefully to understand how your data is handled.
Important: You should have no expectation of privacy when using public inboxes.
01 — Google User Data Policy
Specific details regarding our integration with Google Services (Login/Auth).
Data Accessed
When you choose to sign in using Google, our application accesses the following specific types of Google user data:
Your name and profile picture URL.
The primary email address associated with your Google account.
Data Usage
We use the Google user data we access solely for the following purposes:
To verify your identity and allow you to log in to your dashboard securely without creating a separate password.
To display your name and avatar in the application header and user profile section.
To send critical transactional emails (e.g., subscription receipts) to your verified email address. We do not sell your data or use it for advertising.
02 — Public Inboxes
All inboxes are public
Any message sent to FreeCustom.Email addresses (on public domains) can be read by any user who guesses the inbox name.
No sign-in required for public access
There are no security measures to access public inboxes or view messages contained within them.
Do not send sensitive information (home address, passwords, phone numbers) to these addresses.
03 — Security Notice
Inbox Aliases
Inbox aliases provide basic obfuscation but are not secure. The generation algorithm is public and reversible. Do not rely on aliases for confidentiality.
Anonymity
FreeCustom.Email is not designed for anonymity and is not a replacement for anonymous re-mailers or VPN services.
04 — Account Deletion & Data Retention
You may request account deletion from your profile (Settings → Delete Account). Deletion is scheduled with a 7-day waiting period. During that time you can cancel by logging in and choosing "Do not delete my account" or using the link in the confirmation email.
Deleted immediately upon request: stored emails, attachments, inbox addresses, Redis mailbox data, and user preferences. API keys are revoked. Subscriptions are set to cancelled.
After the 7-day period: your account is permanently converted to a tombstone. We keep only identifiers needed for billing/legal (e.g. payment logs). Your email may be blocked from re-registering for a short cooldown to prevent abuse.
For the API, the same account and deletion policy applies; deleting your account removes app and API data.
05 — Sale of Personal Information
We do not sell your personal information. We do not share your data with third parties for their marketing or for "sale" as defined under the CCPA/CPRA. For more options and to submit a "Do Not Sell or Share My Personal Information" request, see our Do Not Sell My Personal Information page.
06 — Logging & Data Collection
Connection Logging
All email and web connections to our servers are recorded to help prevent abuse and improve service reliability. We cannot provide users with information about specific emails or their delivery status.
No User Tracking
We do not track users across the web or use cookies to store personal profiling information.
The only local storage used is for the most recent inbox you visited (for convenience).
We use an analytics pixel to collect aggregate, non-identifiable data only.
Questions regarding this policy?
If you have concerns about how your data is handled, please contact us.
privacy@freecustom.email