Privacy Policy
Effective: 19 October 2026
This policy explains how FSA SRL, Belgium, processes personal data when operating MailBlink.
Data we process
| Data | Purpose | Retention |
|---|---|---|
| Temporary address, creation and expiry time, access-token hash (the usable token is kept in your browser) | Create and secure the requested inbox | Until the inbox expires or is destroyed |
| Received sender address, subject, message body and attachments | Deliver email to the requested temporary inbox | Until the inbox expires or is destroyed |
| Messages sent to the public service contact address | Answer support, privacy, legal and abuse reports | Up to 90 days, or longer when necessary to investigate abuse or comply with law |
| Technical security logs, which may include IP address, date, user agent and request details | Security, abuse prevention and reliability | Application container logs rotate by size (up to three 10 MB files per container); the time covered depends on traffic. Provider and system logs are subject to their separately configured retention. |
| Consent choices | Record and respect privacy choices | According to the consent platform's configured retention period |
Legal bases
We process inbox data to provide the service requested by the user. Contact messages and security logs are processed to answer requests, comply with legal obligations and pursue our legitimate interests in protecting the service and its users. Non-essential advertising or measurement technologies are used only where valid consent is required and has been given.
Deletion
Access to a temporary inbox ends at its expiry time. A background cleanup process normally runs about once per minute to remove expired inboxes, messages, attachments and related queued mail; outages can delay physical cleanup. The Destroy button deletes an active inbox and its related data from the live database when the request succeeds. Messages sent to the public contact address follow the separate retention period above.
Recovery backups
Protected recovery backups may contain copies of inbox records, messages and attachments that have since expired or been deleted from the live service. Recovery copies are retained for no more than 30 days from creation, including copies on the service operator's computer. This limit is currently managed manually; deletion from an active inbox does not immediately erase an existing backup. Backups are restricted to recovery use and are not a way for users to reopen deleted inboxes. After a recovery, expired records are removed before the service is reopened.
Separate informational site and Google privacy controls
The separate infos.mailblink.net origin is prepared to load Google's AdSense library for European and US privacy messages. Loading it transmits connection data, including the IP address, page URL and browser information, to Google; the CMP may store privacy choices. It cannot read the private inbox token held in local storage on mailblink.net or the HttpOnly administrator session. No manual ad units are configured there. Advertising requires a separate activation and validation; automatic ads must remain disabled during consent testing. The main inbox application and administration do not load this library. Privacy and cookie controls on the informational page allow reopening the applicable Google message when the library is available.
Recipients and hosting
Data is processed by FSA SRL and infrastructure providers necessary to host, secure and operate the service. Public contact messages may be forwarded to FSA SRL's business mailbox. We do not sell inbox contents. If advertising is activated, participating vendors will be disclosed through the consent platform.
Your rights
Subject to the GDPR, you may request access, correction, deletion, restriction, portability or objection. Because free inboxes have no account and are intentionally short-lived, we may need to verify that you control the inbox. Do not send passwords, authenticator codes or inbox access tokens by email. You may lodge a complaint with the Belgian Data Protection Authority.
Contact
Privacy requests: info@mailblink.net.