Privacy policy

What is stored on your device

In the browser's local extension storage, which is not synced to other devices:

• Settings: your on/off choices, the off-screen style, and the optional tempmail.lol API token if you enter one.
• The current signup on each tab: the temporary address, the generated password, the inbox token, and the most recent emails received in that inbox, including any verification code or link found in them.
• History: each account you create, with its temporary address, password, the website address, the date and whether it was verified. Passwords are stored unencrypted so you can look them up and export them.
• A debug log: the last 400 technical events from signups and inbox checks. Events from web pages are recorded only on signup and verification-code pages. It may include temporary addresses and short previews of received emails. It never leaves your device unless you copy it yourself.

You can delete the history at any time with Clear in the extension's History tab. Removing the extension deletes everything it stored.

What is sent, and to whom

BurnerFill sends requests to exactly one service, api.tempmail.lol:

• a request to create a new temporary inbox, and
• repeated requests to read the messages in that inbox, identified by the inbox's own token, until a code arrives or 12 minutes pass.

These requests contain no information about you: not your real email address, not the website you're signing up to, not the password, and not the content of any page. The emails in a temporary inbox are held by tempmail.lol and are subject to tempmail.lol's own terms. Temporary inboxes are not private, so don't use them for anything sensitive.

No data is sold, shared with anyone else, or used for advertising, and nothing is collected by the developer.

Web pages

To recognise signup forms, BurnerFill's content script runs on the pages you visit. It only acts on pages that look like a signup or verification-code form, where it fills in the temporary address, password and code. Page content is never stored beyond the debug log described above, and never sent anywhere.

Clipboard

If Copy OTP to clipboard is on (the default), BurnerFill writes each verification code to your clipboard when it arrives. It never reads your clipboard.

Turning it off

A new install starts switched off. While the power button in the popup is off, BurnerFill detects nothing, fills nothing, and makes no requests to tempmail.lol.

This website

This page and the BurnerFill website are static files. They load fonts from Google Fonts and browser logos from jsDelivr, which receive the usual request information from your browser (such as your IP address) when you visit. The extension itself does neither.

Changes

If this policy changes, the new version will be published on this page with a new date.