The US email landscape
The United States has more marketing email per person than almost any other country, and the legal framework is permissive by design. CAN-SPAM sets a floor of required disclosures and an opt-out mechanism, but it does not prevent commercial email from being sent at volume, does not restrict list resale, and does not require prior consent for B2C marketing email. Opting out is your right, but you have to opt out of each sender individually.
The practical implication is that a single retail signup — a Black Friday discount code, a new streaming service trial, a software download gate — can result in months of email from the original sender plus undisclosed list partners. A disposable address stops that sequence before it starts.
Where it works well
- Retail and ecommerce. Most US retailers accept disposable addresses for newsletter discounts and promotional signups. Apply the split approach: get the code with a disposable address, place the actual order with a real address to preserve order confirmation and return correspondence.
- Software trials. Indie and mid-tier SaaS products often accept disposable addresses. Enterprise SaaS (Salesforce, HubSpot, Adobe) typically does not.
- Gated content. Whitepapers, research reports, webinars — most accept any working address for the delivery step.
- Media sites. Paywalled article limits, registration walls on news sites and magazines typically accept disposable domains.
Where it does not work
- Healthcare. Patient portals (MyChart, healthcare.gov marketplace accounts), pharmacy accounts, insurance portals. These have HIPAA implications and legal recovery requirements.
- Financial services. Banking, brokerage accounts, credit monitoring, tax software (TurboTax, H&R Block). The IRS itself communicates by mail, not email, but the third-party services you use to file are email-dependent for login and alerts.
- Government services. Login.gov, SSA, USCIS case tracking, state DMV online services. These require a durable address for legal notifications.
- Major social platforms. Facebook, Instagram, X/Twitter, LinkedIn — all filter disposable domains aggressively.
Privacy law context
Unlike the EU and UK, the US has no federal privacy law equivalent to GDPR that gives you rights over data a company holds about you. California (CCPA/CPRA), Virginia (VCDPA), Colorado, and a growing list of states have their own laws, but coverage and enforcement vary. For US residents, not providing a real address in the first place is often more effective than attempting to exercise post-hoc data rights.
What is identical everywhere
Address generation, the 60-minute expiry, HTML sanitisation, blocked remote images and the receive-only restriction do not vary by country. There are no regional inboxes and no local data centres — this is one service with one set of rules.