Privacy Policy · Effective September 3, 2026

Know what we process
And stay in control

This policy explains what ForwardGet collects when providing disposable inboxes and long-term email forwarding, why we process it, how long we retain it, and how you can request access, deletion, or correction.

Data and retention at a glance

Different features rely on different data. The table below shows typical purposes and maximum retention limits; security investigations, legal obligations, or your own deletion request may shorten or, where legally required, extend the actual period.

1. Scope and roles

This policy applies to the disposable email, email forwarding, verification-code login, alias management, and recent-record features provided directly on forwardget.com. Third-party websites, senders, and external links you access through messages have their own policies; we do not decide how they process data.

ForwardGet is the data controller for these front-end services and related infrastructure. If you use an alias to receive someone else’s messages, you must also ensure that you have a lawful basis to receive that communication.

2. Information we collect directly

When you use a disposable email address, we process the automatically generated address, access token, expiration time, and the headers, content, and attachments sent to it. The token connects your current browsing session to the inbox and should not be shared publicly.

When you use long-term forwarding, we process the receiving address you provide, the aliases you create, verification-code results, delivery status, and account security settings. If you enable authenticator codes, we store the key material needed for verification but do not read other accounts in your authenticator.

3. Technical information generated automatically

Servers may log IP addresses, request times, browser type, response status, and brief error summaries to apply rate limits, detect automated abuse, and restore service. We do not require disposable inbox users to provide their name, address, or payment details.

These logs are managed separately from message content and access is limited to people responsible for operations or security. We do not build browsing-history profiles for cross-site advertising.

4. Purposes and legal bases

We create addresses, display incoming messages, forward email, and verify logins to provide the service you request. We also process necessary security logs to maintain reliability and prevent spam, attacks, and misuse of resources.

Where applicable law requires consent, we will obtain it before enabling non-essential storage or similar technologies. Necessary session tokens support inbox features you actively request; disabling them may prevent continued access to your inbox.

5. Message content and attachments

Messages and attachments may contain personal information included by the sender. The system processes them automatically only to display and forward them, detect spam, and support recent viewing requested by you; we do not use message content to train public models or build marketing audiences.

A disposable inbox is not an encrypted safe and is not suitable for medical, financial, work-confidential, or irreplaceable account-recovery information. Do not rely on this service to keep the only copy, and check the source yourself before downloading attachments.

6. Retention and deletion

Temporary addresses cannot be renewed after expiration, and related content enters automatic cleanup. Recent messages in long-term forwarding are kept for up to 30 days; aliases remain until you delete them or the account ends.

Backups and security logs may take longer to clear because of rotation cycles, but they will not continue to be shown to users as online records. We may pause deletion when necessary for legal preservation, fraud investigations, or dispute handling.

7. Sharing and service providers

We share information with service providers only as needed for hosting, email delivery, security protection, and incident monitoring, and require them to process it on our instructions and apply confidentiality and security measures. Forwarding necessarily sends received messages to the receiving email provider you specify.

We do not sell personal information or rent receiving addresses to advertisers. We may disclose the minimum necessary information when legally required, to protect user safety, or to stop attacks.

8. International processing

Web hosting and email routing may cross the country or region where you are located. When processing crosses borders, we use safeguards required by applicable law, such as contracts, access controls, and data minimization.

Data protection standards may differ between jurisdictions. Contact our support email to learn about arrangements relevant to your location.

9. Security measures

We use encryption in transit, separated permissions, verification-code login, optional authenticator-code protection, rate limits, and log reviews. No internet service can guarantee absolute security, so we also limit retention to reduce long-term exposure.

Keep your inbox tokens, email verification codes, and authenticator devices secure. If you suspect unauthorized access, immediately delete or pause the affected aliases, update your receiving email’s security settings, and contact us.

10. Your choices and rights

You can delete individual temporary messages, forwarding records, or aliases yourself. You may also request access, correction, deletion, restriction of processing, or a copy of applicable data. The specific rights available depend on your location and the data involved.

To prevent someone else from claiming your data, we may ask you to verify using the receiving email address. If you cannot prove control of a disposable email token or receiving address, we may be unable to disclose the related content.

11. Children

This service is intended for users who can enter into an online service relationship and is not designed specifically for children. We do not knowingly ask children to submit their names or create advertising profiles.

If a parent or guardian believes that a child has provided personal information to us, please provide verifiable details. Once confirmed, we will delete or restrict processing as required by applicable law.

12. Changes, contact, and complaints

When our features, legal requirements, or security practices materially change, we will update the date on this page and, where appropriate, provide additional notice. A new version will not retroactively change specific commitments already made unless required by law.

Send privacy requests to support@forwardget.com. You may also complain to the data protection authority with jurisdiction where you live; we still recommend contacting us first so we can identify and resolve the issue quickly.