FFree Domain MailFREE
Sign inCreate accountOpen app →

Legal

Security

This policy explains the limits and responsibilities that keep the service safe for recipients and users.

What Free Domain Mail does

Free Domain Mail only receives email; this page covers how we keep that mail and your account safe.

HTML mail is sanitized

Message bodies are sanitized before display and rendered inside a sandboxed frame. Remote images are blocked by default so opening a message cannot silently confirm your address to a sender.

API keys

API keys are stored as hashes, not plain text; we cannot recover a lost key and can only issue a new one.

Rate limits

Domain creation and API access are rate-limited per account and per IP address to reduce abuse.

Responsible disclosure

If you find a security issue, email security@freedomainmail.com with steps to reproduce it. We investigate every report.

Operator and beta status

Free Domain Mail is an independently operated beta project. A registered legal entity and named operator have not yet been published. This is an explicit disclosure, not a corporate identity claim.

How receiving works

Free Domain Mail is receive-only: it never sends or forwards customer email. Receiving runs on the project's own mail server (a VPS), for both public temporary addresses and verified custom domains. The only outgoing mail is account mail (verification, password resets) and support replies, both sent through Resend.

Retention and storage

Public temporary mail on freedomainmail.info and freedomainmail.link is deleted automatically after 10 minutes. Custom-domain mail is kept for 30 days. Attachments are never stored — only their file name, size and type are recorded.

Uptime history

Current service checks are shown on the status page. A sufficiently long, independently measured uptime history is not available yet, so no uptime percentage is claimed.

Retention and limits

Free Domain Mail only receives email — it never sends or forwards mail on your behalf. Public temporary addresses are deleted after 10 minutes; custom-domain mail is kept for 30 days. Attachments are never stored, only their name, size and type.

Contact & abuse

Security reports: security@freedomainmail.com
Abuse reports: abuse@freedomainmail.com
Support: support@freedomainmail.com