BurnerFill has no account, no server of its own, no analytics and no ads.

What is stored on your device (browser extension storage, not synced):
- Settings, including an optional tempmail.lol API token.
- The current signup on each tab: temporary address, generated password, inbox token, and recent emails received in that inbox.
- History of accounts you created (temporary address, password, website address, date, status). Passwords are stored unencrypted so you can look them up and export them. Delete them with Clear in the History tab.
- A debug log of the last 400 technical events from signups and inbox checks. It never leaves your device unless you copy it yourself.
Removing the extension deletes everything it
What is sent: BurnerFill talks to exactly oneo create a temporary inbox and read themessages in it (identified by that inbox's own token). These requests contain no information about you: not your real email, not the website you sign up to, not thnt. Temporary inboxes are held by tempmail.lolunder its own terms and are not private.

Web pages: the content script runs on pages you visit to recognise signup forms, and acts only on signup and
verification-code pages. Page content is neve

Clipboard: if "Copy OTP to clipboard" is on, pboard when they arrive. The clipboard is never read.

Off switch: new installs start switched off. While off, BurnerFill detects nothing, fills nothing and makes no requests.

Full policy: https://nafismahmud181.github.io/burnerfill/privacy.html