Contact ShieldMail

ShieldMail is run by one person, so this page is deliberately specific about what to send where and how long it takes.

Addresses

Those windows are honest estimates from a single maintainer, not a service-level agreement. Abuse reports are prioritised above everything else.

The quickest route is the form at the bottom of this page. It reaches the same person and saves you picking an address.

What to include in a bug report

Three things make a report actionable, and reports missing them usually cannot be reproduced:

1. What you did — the steps, in order, including which button you pressed.
2. What you expected to happen.
3. What happened instead — the exact error text if there was one.

Also useful: your browser and version, whether an extension might be blocking scripts, and roughly when it happened.

Do not send: passwords, payment details, identity documents, or the contents of a mailbox that contains anything sensitive. There is no reason for any of that to reach us, and we do not want it.

Reporting abuse

If somebody has used a ShieldMail address to harass you, evade a ban, or attack a service you operate, write to the abuse address with:

• The full address involved, if you have it
• The approximate time
• What happened, with headers if you are able to include them

These mailboxes are short-lived and we hold no message archive, so acting on a report is only possible in a narrow window. Sooner is much better.

Privacy requests

If you are exercising a data right under GDPR or a comparable regime, write to the privacy address and say which right you are exercising. Note that ShieldMail deliberately holds very little: there are no accounts, no stored message bodies, and no user profiles. The full breakdown of what exists and for how long is in the privacy policy.

Mail that reached a temporary inbox is held by the upstream provider that received it, not by us, so a deletion request for message contents needs to go to that provider. We can tell you which one issued a given address if you can identify it.

What we cannot help with

Being clear about this saves everybody time:

• Recovering an expired mailbox. It is not possible. No copy exists, here or upstream.
• Retrieving a message you did not save. Same reason.
• Getting a specific website to accept a disposable address. That is their block list, not something we control. Press Change and try a different provider.
• Unlocking an account you registered with a disposable address. Only that service can do this, and usually it cannot either.

Before you write

Two pages answer most incoming questions:

• How to use temporary email safely covers what each control does and the three things that commonly go wrong.
• Eight mistakes people make with temporary email covers the situations that generate most support mail.

FAQ

Is there a phone number?

No. Email only, from the addresses above.

Will you reply to every message?

Every message that needs a reply, yes, within the windows above. Automated mail and marketing pitches are not answered.

Can you tell me who used a particular address?

No, and this is not evasion. There are no accounts, so there is nothing linking an address to a person in any record we hold.

How do I request that my data be deleted?

Write to the privacy address. In practice there is very little to delete, because there are no accounts and no stored messages; the privacy policy lists exactly what exists.

Do you accept security vulnerability reports?

Yes, and gratefully. Send them to the legal address with enough detail to reproduce the issue, and please give a reasonable window before disclosing publicly.