NOTSPAM.UK · LEGAL
Privacy Policy
Last Updated: July 2026 · UK GDPR Compliant · ICO Registered
1. Who We Are
NOTSPAM.uk is operated by ItsMyApp.co.uk. For all data protection enquiries, please contact our Data Privacy Lead at hello@itsmyapp.co.uk.
2. Our Zero-Data Architecture
NOTSPAM.uk is a client-side-only application. By design:
- ✓We store zero personal data on any server operated by or on behalf of NOTSPAM.uk
- ✓All email address generation occurs in your browser using a cryptographically secure random number generator
- ✓Email message content is fetched directly from a third-party relay (1secmail.com) and rendered only within your browser session
- ✓A browser refresh permanently and irrecoverably destroys your session
- ✓We set no persistent cookies and use no client-side storage (localStorage, IndexedDB, etc.)
3. Information Points We May Process
In the course of operating our infrastructure and protecting against abuse, we may transiently process the following categories of information:
Technical & Network Data
- —IP address (processed by our hosting infrastructure for fraud detection and abuse prevention)
- —Browser user-agent string (for compatibility and bot detection)
- —Request timestamps and HTTP status codes (for fault diagnosis)
- —TLS handshake metadata (for connection security)
System Usage Metrics
- —Aggregate request volumes (no individual identification)
- —Error rates and response times (for service stability)
4. Legal Bases for Processing
Where any transient processing occurs, we rely on the following legal bases under UK GDPR:
Legitimate Interests
Infrastructure stabilisation, malware and fraud detection, connection parameter verification to minimise structural abuse, and critical fault diagnosis and repair. These processing operations are managed under recognised Legitimate Interests grounds. A Legitimate Interests Assessment (LIA) has been conducted and is available on request. No balancing assessment override applies given the minimal privacy impact and the absence of any sensitive data categories.
5. Third-Party Services
NOTSPAM.uk uses 1secmail.comas a third-party email relay provider. When you use the Service, your browser makes direct API requests to 1secmail.com to retrieve messages. 1secmail.com's own privacy policy and data retention terms apply to any data transmitted to their servers. We have no control over 1secmail.com's data practices and encourage you to review their documentation.
Our hosting infrastructure is provided by Vercel, Inc., which may process technical connection data as described in section 3. Vercel's data processing agreements are compliant with UK GDPR requirements.
6. Your UK GDPR Rights
Under the UK General Data Protection Regulation, you have the following rights:
Right of Access (SAR)
Request a copy of any personal data we hold
Right to Rectification
Correct inaccurate data we hold about you
Right to Erasure
Request deletion of your personal data
Right to Restrict
Limit how we use your data
Right to Object
Object to processing based on legitimate interests
Right to Portability
Receive your data in a machine-readable format
7. Subject Access Requests (SARs)
To exercise any of your rights, submit a written request to hello@itsmyapp.co.uk. We will formally acknowledge your request within 30 days. This 30-day period may be paused where we require additional information to verify your identity or to clarify the scope of your request.
8. Right to Escalate to the ICO
If you are unsatisfied with our response to a data protection concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters:
Website: ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF