Privacy and Security Policy
Last updated: September 2026. This English page describes the same service as the Turkish policy. If you have a privacy or security concern, contact us directly.
Data controller and contact
Data controller: Datakobi Bilişim Teknoloji. For privacy requests and data subject inquiries, email iletisim@gecici.email. We may need to verify that the requester is associated with the relevant inbox or data before responding.
1. Data we process
The service processes inbox addresses, access tokens, and the sender, subject, content, and extracted summaries of received emails. Email content may contain personal or sensitive information. We do not make an unverified “zero logs” guarantee about hosting, security, or access records.
2. Retention and deletion
The web API stores inboxes and messages in a server-side SQLite database. The default inbox lifetime is 60 minutes. An authorized user can extend the lifetime or delete the inbox. Expired records are logically deleted during API requests. We do not guarantee irreversible physical erasure from SQLite disk pages, server backups, or infrastructure logs.
3. HTML email safety
HTML in incoming email is untrusted content. Sandboxed display in the web interface offers protection, but you should not open unknown links or use temporary inboxes for sensitive accounts.
4. Receive-only inbox and access tokens
The service is intended to receive email; it does not provide a user-facing outbound email feature. Access to an inbox requires the token issued when that inbox was created. If you lose the token, you cannot reopen the inbox. Anyone you share the token with may read its contents. This is not an account system or end-to-end encryption.
5. Contact
For product support, security reports, and privacy requests, email iletisim@gecici.email.