Privacy
What we know about you: almost nothing.
mktemp is built to know nothing about you. This page describes precisely what the service stores, what it does not, and what this architecture makes impossible — even for us.
Last updated: July 2026
No personal data collected
Creating an account requires no email address, no name, no phone number, no bank card. A mktemp account is a 16-digit identifier drawn at random — nothing else. No profile, no “optional” field, no newsletter.
We don’t ask for this information because we don’t need it: the credit balance is enough to run the service.
An identifier encrypted at rest
Your identifier exists nowhere in clear text in our systems. In the database, it appears only in two forms:
- an HMAC-SHA256 fingerprint, computed with a server secret, used only to verify a login;
- an AES-256-GCM encrypted version, decrypted on demand to display it during your session.
The encryption keys are kept outside the database. A copy of the database alone reveals no identifier.
Minimal logs
- Technical logs are limited to what is necessary for the operation and security of the service — not to analyzing your behavior.
- The IP address is used for rate limiting (anti-abuse) and is not kept beyond its calculation window.
- No advertising tracker, no third-party audience measurement.
Non-custodial payments
Top-ups are settled in Bitcoin or Monero, with no banking intermediary. We record what is necessary for credit accounting — pack, amount, transaction status — never an identity. No card number, no IBAN, no name enters the system.
Your emails
Received messages live and die with the address that receives them. At a zero balance, the address goes read-only during the 7-day grace period, then the address and its messages are permanently deleted. No content is analyzed for advertising or profiling purposes.
What we cannot do
These limits are not marketing promises: they follow from the architecture.
Recover a lost identifier
It is stored nowhere in clear text and no recovery channel exists. Lost is lost — by design.
Know who you are
No account data ties back to a person. We see a balance and addresses, not an identity.
Hand over what we don’t have
Data that was never collected can be neither disclosed, nor sold, nor demanded by a third party.
The rest of the answers are in the FAQ.