LAST UPDATED: MARCH 2026 · ZERO-LOGGING STANDARD
At aitols.shop, privacy is not an optional feature—it is the entire reason our service exists. We believe you should be able to explore the internet without leaving a persistent trail of email telemetry. We do not require registration, we do not monetize user data, and all inbound messages self-destruct automatically.
Our architecture is engineered around the principle of data minimization:
Inbound email data is processed exclusively for the real-time presentation of messages in your active browser window. Messages are held in ephemeral, volatile memory buffers solely so you can read verification codes or click confirmation links. We do not sell, rent, commercialize, or share email data with any third party.
Our retention policy enforces strict, irreversible destruction:
We only utilize local browser storage (localStorage) to maintain your active address and theme preferences between tab reloads. We do not issue cross-site tracking cookies, canvas fingerprinting beacons, or advertising cookies.
All web transmissions occur strictly over HTTPS with modern TLS 1.3 encryption. Inbound email HTML is sanitized with isomorphic DOMPurify to neutralize Cross-Site Scripting (XSS) vectors, malicious image exploits, and hidden tracking pixels. We also enforce automated rate limits to protect against denial-of-service abuse.
Under GDPR, CCPA, and global privacy standards, you maintain the right to erase your data. Because aitols.shop maintains no user accounts or persistent database records tied to your physical identity, deleting your address or clearing your inbox instantaneously exercises your right to be forgotten.
If you have questions regarding this Privacy Policy or our security protocols, please reach out to our team at: