Safety & responsible use

If you see a Tmail.pk inbox being used for phishing, harassment, fraud, or anything illegal, tell us and we will investigate. Send the address involved — and a screenshot or the message headers if you have them — to abuse@tmail.pk.

Because inboxes are receive-only and disposable, the fastest remedy is usually to block the offending address and the client behind it, which we can do once we can identify it. For anything else, the contact page lists the right channel.

Tmail.pk is built for legitimate privacy: one-time signups, email verifications, password resets, developer testing, and keeping your primary inbox free of marketing. It is a receive-only service — you cannot send mail from it, which keeps it simple and resistant to abuse.

Please don't use Tmail.pk to harass, defraud, impersonate, or break the law, to send or distribute malware, or to abuse another service's free tier at scale. We may block addresses or clients that misuse the service, and we cooperate with valid abuse reports.

We store and display messages — including attachments — as we receive them. We do not open, execute, or virus-scan attachments on your behalf, and we cannot verify that a file or link is safe.

Treat everything in a disposable inbox as untrusted. Don't download or run files from senders you don't recognise, be cautious with links, and never enter real passwords, card numbers, or personal details into a page you reached from a message in a temporary inbox.

Each inbox is protected by a password. Anyone who has both the address and its password can read that inbox, so treat the password like any other credential: keep it private, don't paste it into untrusted sites, and — importantly — never reuse a password you use anywhere else. Use a unique, throwaway password for a throwaway inbox.

A temporary inbox is designed to be low-stakes, not a secure vault. Don't use one to receive anything you couldn't stand to lose or have exposed — sensitive documents, long-term account recovery, or confidential information belong in a real, private mailbox.

Privacy has a trade-off: we don't ask for a phone number or a real backup email, so there is no "forgot password" reset for a guest inbox. If you lose the address or the password we showed you, that inbox generally cannot be recovered.

Save your credentials when you create an inbox (the credentials card has a one-click copy button). If you want a single place to manage several inboxes under one login, create a free account instead of relying on individually saved guest credentials.

We collect the minimum needed to run the service — your inbox address and password, the messages the inbox receives, and limited data used for rate limiting and abuse prevention. We do not sell your data or share it with advertisers. See the Privacy Policy for the full breakdown.

Access to the systems that store inbox data is limited to the small team that operates Tmail.pk, and only for maintenance, support, and abuse investigations. Because inboxes are meant for throwaway use, don't treat them as private encrypted storage — our operators can access inbox data when it's required to run the service.

If we become aware of a security issue affecting inbox data, we investigate promptly, take affected components offline where necessary, and fix the root cause. Given the disposable design of the service, your strongest protection is to keep nothing sensitive in a temporary inbox in the first place.

We operate from Pakistan and will respond to valid legal requests under applicable law. Because we deliberately store very little, there is little to disclose — typically only the inbox address, the messages it has received, and limited abuse-prevention data. We do not retain a broad profile of your activity.