ree Temp Toolsfree · instant · no sign-up

Home / Learn / Privacy / Online Privacy Checklist

Online Privacy Checklist: 100+ Ways to Protect Your Digital Life

A comprehensive checklist for accounts, passwords, MFA, browsers, phones, Wi-Fi, social media, tracking, identity theft, documents, AI, and more.

In this guide

Online privacy is not one setting, one browser extension, one VPN, or one anonymous email address. It is the result of hundreds of small decisions about what information you share, which accounts you trust, how you secure devices, how you recover accounts, and how quickly you respond when something looks wrong.

A practical privacy strategy does not require disappearing from the internet. It means reducing unnecessary exposure, separating important accounts from disposable activity, limiting tracking where possible, and protecting the information that could cause the most harm if stolen or misused.

This FreeTempTools Learning Center guide is designed as an evergreen reference. You do not need to complete every item in one day. Start with the highest-impact actions, then work through the remaining sections over time.

Quick Start: The 15 Highest-Impact Privacy Actions

CISA's Secure Our World guidance emphasizes phishing recognition, strong passwords, MFA, and software updates. Those actions form a strong foundation for the detailed checklist below.

How to Use This Checklist

Use it as a personal audit, a weekly improvement plan, or an annual review. The goal is not perfect privacy. The goal is better control and fewer unnecessary risks.

1. Account Security Checklist

2. Password Privacy Checklist

3. Multi-Factor Authentication Checklist

4. Email Privacy Checklist

Put it into practice

For one-time, low-risk registrations where future recovery is unnecessary, use Temp Mail.

Related reading:

5. Phone Number Privacy Checklist

6. Phishing and Scam Defense Checklist

Tick off the email items now

The email section of this checklist is the fastest win on the page. Generate a disposable address and use it for the next low-stakes sign-up.

Open Temp Mail →

7. Browser Privacy Checklist

8. Cookies and Tracking Checklist

Check your public IP

Use What Is My IP to see the public IP address your connection presents. An IP address is only one privacy signal; account logins, cookies, device identifiers, and browser characteristics may still connect activity.

9. Social Media Checklist

10. Mobile Device Privacy Checklist

11. Home Wi-Fi and Router Checklist

12. Public Wi-Fi Checklist

13. Online Shopping Checklist

14. Payments Checklist

15. Document Privacy Checklist

FreeTempTools document resources

These tools assist with a workflow but do not replace your responsibility to review sensitive content and legal requirements.

16. Image Privacy Checklist

Image tools

Compression and background removal do not automatically remove metadata or every sensitive visible detail.

17. Temporary Sharing Checklist

Temporary sharing tools

Expiration does not prevent a recipient from copying or preserving content.

18. Software Testing and Sample Data Checklist

Testing resources

Use fictional data for legitimate testing, demonstrations, and mockups: not impersonation, fraud, evasion, or harassment.

19. Cloud Storage Checklist

20. AI Privacy Checklist

21. Smart Home and IoT Checklist

Share things without leaving a copy behind

For the sharing items on this list, a self-destructing note or a browser-to-browser transfer leaves nothing sitting on someone else's server.

Open Self-Destructing Notes →

22. Travel Privacy Checklist

23. QR Code Safety Checklist

Create a code with QR Code Generator when you need a QR code for a destination you control and have verified.

24. Identity Theft Prevention Checklist

25. Data Breach Response Checklist

26. Children and Family Privacy Checklist

27. Work and Small Business Checklist

28. Public Profile and Data Brokers Checklist

29. Physical Privacy Checklist

30. Device Disposal Checklist

Monthly Privacy Maintenance

Once a month, review financial statements, important account alerts, pending updates, suspicious emails, unused apps, newsletter subscriptions, and backup status. Small recurring reviews prevent privacy debt from accumulating.

Quarterly Privacy Maintenance

Every few months, review email forwarding rules, recovery methods, active sessions, connected apps, browser extensions, social privacy settings, public sharing links, location permissions, carrier security, and critical family accounts.

Annual Privacy Maintenance

At least once a year, review credit reports, credit-freeze needs, primary-email exposure, public profiles, data brokers, old cloud files, old devices, smart-home accounts, family plans, and emergency recovery documentation.

Privacy Risk Matrix

SituationRiskIdentity approachTemporary tool?
Generic one-time downloadLowMinimal informationOften
Software test accountLowFictional/test dataOften
NewsletterLow to moderateAlias or secondary emailSometimes
Online communityModerateStable secondary accountSometimes
Online purchaseModerateAccurate identity and stable emailUsually no
Travel reservationModerate to highPermanent accountNo
Social account you valueModerate to highPermanent recoveryNo
EmploymentHighAccurate identityNo
HealthcareHighStrongly protected permanent accountNo
BankingHighStrongly protected permanent accountNo
TaxesHighStrongly protected permanent accountNo
Government servicesHighStrongly protected permanent accountNo

Put This Checklist Into Practice With FreeTempTools

FreeTempTools does not make someone invisible. Its utilities are practical tools for specific workflows.

Use permanent, strongly protected accounts for important relationships. Use temporary tools only where losing access would not matter.

Printable 25-Point Privacy Reset

  1. Secure your primary email with a unique password.
  2. Turn on MFA for that email.
  3. Use a password manager.
  4. Replace reused passwords.
  5. Enable MFA on banking.
  6. Enable MFA on cloud storage.
  7. Review recovery phone numbers.
  8. Review recovery email addresses.
  9. Sign out old devices.
  10. Remove unused connected apps.
  11. Update your phone.
  12. Update your computer.
  13. Update your browser.
  14. Update your router.
  15. Review social-media privacy.
  16. Remove unnecessary browser extensions.
  17. Review location permissions.
  18. Review financial statements.
  19. Review credit reports.
  20. Consider a credit freeze.
  21. Reserve your primary email for critical accounts.
  22. Use aliases or secondary email for routine accounts.
  23. Use temporary email only for disposable activity.
  24. Create a household scam-verification rule.
  25. Bookmark official recovery resources before you need them.

Common Privacy Mistakes

Trying to Become Completely Anonymous

Complete anonymity is difficult and usually unnecessary for ordinary users. Focus on minimizing exposure and controlling high-value information.

Using One Identity Everywhere

One email, phone number, username, and password across every service makes correlation and compromise easier.

Overusing Temporary Tools

Disposable tools are useful only when the account or communication is genuinely temporary.

Assuming a VPN Solves Privacy

A VPN changes network routing. It does not stop account tracking, cookies, phishing, malware, or unsafe sharing.

Ignoring Physical Security

A stolen unlocked device can bypass many online privacy choices.

Accepting Every Permission

Apps and websites often request more access than they need.

Forgetting Recovery Methods

Old phone numbers and email addresses can become attack paths.

Confusing Encryption With Trust

HTTPS protects a connection. It does not prove the website is legitimate.

Assuming Deletion Removes Every Copy

Backups, screenshots, archives, recipients, and third parties may retain information.

Waiting Until Something Goes Wrong

Privacy is easier to maintain before a breach or identity-theft incident.

Final Recommendation

Do not try to complete this checklist all at once. Start with the accounts capable of recovering other accounts: email, password manager, phone carrier, financial services, cloud storage, and government identity accounts.

Then reduce unnecessary exposure. Separate critical identities from routine registrations. Review social profiles, permissions, browser data, old devices, cloud shares, and physical records.

Finally, build a maintenance habit. Privacy degrades over time as new apps are installed, old accounts remain open, family situations change, and services update their settings. The best privacy system is one you can actually maintain.

Continue Learning

As additional Privacy flagship guides are published, add them through the module's RELATED_GUIDES registry and review whether contextual links should be added to relevant sections.

Why a Checklist Works Better Than a Single Privacy Tool

Privacy problems rarely come from one source. A person might use a strong password but expose a recovery email publicly. They might use a VPN while staying signed into the same advertising account. They might lock down social media but leave old cloud-sharing links active. They might remove an image background while leaving a home address visible in a reflection.

A checklist forces the privacy strategy to cover multiple layers: identity, accounts, devices, networks, browsers, applications, sharing, physical records, monitoring, and recovery. That is why this guide deliberately includes actions that overlap. Different controls protect against different failures.

Privacy is about reducing unnecessary exposure

Not every website needs the same amount of information. A bank legitimately needs accurate identity and recovery data. A one-time download usually does not deserve the same access. The safest approach is to match the amount and permanence of information to the task.

Security supports privacy

A private account is not private if someone else can sign in. Unique passwords, MFA, software updates, secure recovery, and device protections are privacy controls because they protect who can access personal information.

Monitoring supports recovery

Even strong preventive controls can fail. Breaches occur outside the user's control, devices can be lost, and organizations can make mistakes. Financial alerts, credit reports, account notifications, and breach response plans reduce the time between misuse and discovery.

Temporary tools have a specific role

Temporary email, expiring notes, temporary pastebins, and short-lived file-transfer links are useful when the relationship itself is temporary. They are not substitutes for permanent accounts that need customer service, refunds, legal notices, medical records, password recovery, or financial alerts.

The decision rule is simple: if losing the contact method or message tomorrow would create a meaningful problem, use a stable, strongly protected account instead.

A Practical Privacy Model: Minimize, Separate, Secure, Verify, Monitor, Recover

A memorable privacy strategy can be reduced to six verbs.

Minimize

Share only what the task requires. Skip optional fields. Avoid publishing sensitive contact details. Remove information from files and images that the recipient does not need.

Separate

Use different contact channels and browser contexts for different risk levels. Keep banking and healthcare separate from newsletters, testing, promotions, and public profiles.

Secure

Use unique passwords, MFA, updated software, safe recovery methods, device encryption, strong screen locks, secure routers, and carefully managed permissions.

Verify

Independently confirm unexpected requests. Do not let urgency replace verification. Use known phone numbers, official apps, trusted bookmarks, and established family or business procedures.

Monitor

Review financial statements, account alerts, credit reports, sign-in activity, cloud shares, device lists, and permissions.

Recover

Know what to do after a breach, stolen device, account takeover, lost wallet, or identity-theft incident. Recovery is faster when official contacts and procedures are known before an emergency.

This model can also guide future FreeTempTools content. Every new privacy guide should explain which of these six jobs the topic or tool helps accomplish.

Why These Privacy Controls Matter

A checklist is most useful when the reader understands what each control is trying to accomplish. The following explanations connect the individual actions into a coherent privacy strategy.

Protect the accounts that can recover other accounts

Not every account deserves the same level of protection. An old forum account is not equivalent to the email account that resets your bank password. Start by identifying the accounts that serve as identity anchors: primary email, password manager, mobile carrier, cloud account, financial institutions, government portals, and the accounts used to recover them.

If one of those anchors is compromised, an attacker may be able to reset passwords, intercept alerts, change recovery details, discover other services you use, and impersonate you. That is why unique passwords, MFA, session review, secure recovery, and minimal public exposure belong at the beginning of the checklist.

Reduce correlation by separating identities

Using the same email address, phone number, username, browser profile, and payment details everywhere makes it easier to connect activities across services. Separation does not require false identities. It can be as simple as reserving one email for critical accounts, using aliases or a secondary inbox for routine services, and using a temporary inbox only for disposable interactions.

This separation also improves breach response. If a shopping alias starts receiving spam, you can replace it without changing the email used for banking. If a temporary registration is breached, your permanent inbox was never part of the database.

The same principle applies to browsers. Separate work and personal profiles reduce accidental data mixing. A dedicated profile for high-value financial activity can also reduce unnecessary extensions and cookies in that context.

Understand the limits of temporary tools

Temporary tools are valuable because they shorten the lifespan of information. A disposable inbox can keep a permanent email out of a low-value signup. An expiring note can reduce the period during which a link remains available. A temporary paste can keep test text from becoming a permanent public page.

But expiration is not secrecy. A recipient can copy a note. A temporary inbox may disappear before a password reset is needed. A file-transfer link may still expose a file to anyone who receives the link. These tools are therefore best for low-risk, short-lived tasks: not banking, healthcare, taxes, government services, employment, legal records, or long-term account recovery.

Treat data minimization as a daily habit

Many privacy problems begin when people provide more information than a task requires. Forms may request full names, phone numbers, demographic data, company details, location, contacts, or marketing consent even when those fields are optional.

Before providing information, ask three questions: Is it required? Is it proportional to the service? Will I need this relationship later? If the answer suggests that the information is unnecessary, skip the field or use a less identifying option where lawful and appropriate.

Data minimization is not about entering inaccurate information where the service legitimately requires identity. It is about refusing unnecessary exposure.

Privacy settings need maintenance

Settings change. Devices are replaced. Apps gain new permissions. Old phone numbers remain attached to recovery flows. Shared folders continue to exist after projects end. Browser extensions remain installed for years. Family members move between devices and accounts.

That is why this guide includes monthly, quarterly, and annual reviews. A privacy setup that was good two years ago may no longer reflect the services, devices, or relationships you use today.

Security updates are privacy controls

Software flaws can allow attackers to read files, steal sessions, install malware, or gain access to accounts. Installing updates reduces exposure to known vulnerabilities that vendors have already fixed.

Updates matter across the entire stack: operating system, browser, mobile apps, document readers, router firmware, password managers, smart devices, and security software. An unpatched router or abandoned smart camera can undermine otherwise careful privacy settings.

MFA reduces the value of stolen passwords

Passwords can be phished, reused, guessed, exposed in breaches, or stolen by malware. MFA adds another requirement. When available, passkeys and hardware security keys can provide stronger phishing resistance than codes that a user can be tricked into sharing.

MFA is not perfect. Attackers may send repeated prompts, impersonate support, or attempt SIM swapping. The checklist therefore combines MFA with secure recovery, carrier protections, and independent verification.

Phishing defense is mostly about verification

Modern phishing can look professional. Logos, writing quality, caller ID, websites, voices, and images can all be imitated. The safest habit is not trying to become perfect at spotting fakes. It is creating a process that does not depend on the message being genuine.

If a bank says there is a problem, open the bank's official app. If a relative requests money, call a known number. If an employer changes payment instructions, verify through an established business process. If a website asks for credentials after an unexpected QR scan, navigate to the site independently.

Verification breaks the attacker's control over the communication channel.

Browser privacy is broader than cookies

Cookies are only one tracking technology. Websites can also use account logins, local storage, IP addresses, device identifiers, browser characteristics, advertising IDs, link identifiers, and server logs.

This is why a single setting such as “block cookies” cannot create complete privacy. The checklist instead recommends a combination: reduce third-party tracking, use separate profiles, review permissions, remove extensions, avoid unnecessary logins, control location sharing, and understand what your public IP reveals.

Public Wi-Fi risk has changed

Public Wi-Fi advice is often repeated from an earlier era of the web. The FTC notes that widespread website encryption means public Wi-Fi is generally safer than it was when many sites transmitted sensitive data without encryption.

That does not make every hotspot trustworthy. Fake networks, malicious captive portals, unsafe links, compromised devices, and social engineering remain relevant. The more useful rule is to use encrypted websites, updated devices, official apps, careful network verification, and normal phishing defenses regardless of the network.

Documents and images can contain hidden information

A PDF may contain comments, revision history, hidden text, metadata, embedded files, or OCR layers. An image may contain location metadata, a visible address in the background, a reflection of a computer screen, a license plate, an employee badge, or a child's school information.

Editing one visible element does not automatically make a file private. Compressing an image changes size. Removing a background changes visible pixels. OCR extracts text. Signing a PDF adds a signature. Each tool solves one task, so privacy still requires reviewing the final artifact.

AI services require the same data-minimization discipline

AI systems can accept documents, images, spreadsheets, recordings, code, and connected cloud data. That makes them powerful, but also creates opportunities for people to upload information they would never intentionally publish.

Before uploading a file, consider whether it contains customer data, employee records, financial details, medical information, legal material, government identifiers, private source code, or trade secrets. Review service retention and training settings, and follow organizational policy.

The important privacy question is not whether “AI is safe” in the abstract. It is whether this particular service, configuration, and use case is appropriate for this particular data.

Identity theft prevention requires more than monitoring

Monitoring services can alert a person to changes, but an alert arrives after something has happened or been detected. Preventive controls such as credit freezes, MFA, password separation, carrier protections, secure mail handling, and limited public exposure reduce the chance that stolen information can be used successfully.

At the same time, no preventive system is complete. Tax, medical, benefits, child, employment, and account identity theft may not appear as a new credit card. That is why the checklist includes medical statements, tax notices, benefits letters, employer records, and account alerts alongside credit reports.

Household privacy is a shared system

One family member can expose another person's information by posting travel plans, sharing a birthday, syncing contacts, revealing a pet name used in security questions, or responding to an impersonation scam.

Families should agree on simple rules: do not share authentication codes, verify emergency requests through a known channel, protect children's identifiers, review shared location settings, and maintain separate accounts. A private family verification phrase can help when a request is unusual or urgent.

Business privacy depends on process

Small businesses often focus on technical security while overlooking process failures. A perfectly secured email account does not stop an employee from changing vendor bank details based on a convincing message. MFA does not prevent an authorized employee from accidentally sharing customer records with the wrong person.

Strong business privacy therefore combines technology with procedures: least privilege, secure offboarding, payment verification, vendor review, approved sharing systems, backups, phishing reporting, and incident-response planning.

Recovery planning is part of privacy

Privacy protection is incomplete if a person does not know what to do after a compromise. Store official fraud contacts, know how to revoke sessions, know where recovery codes are kept, understand credit freezes, and know where to report identity theft.

A calm, documented response is faster than trying to discover every procedure during an emergency. The best time to learn account-recovery steps is before the account is lost.

How to Prioritize the Checklist by Risk

Not everyone needs to complete every item with equal urgency. Prioritize based on potential harm.

Priority 1: Identity anchors

Primary email, password manager, mobile carrier, banking, government identity, healthcare, and cloud storage should receive the strongest protection first.

Priority 2: High-exposure accounts

Social media, shopping, travel, payment apps, and widely used cloud services often contain enough personal information to support convincing scams or account recovery attacks.

Priority 3: Devices and networks

Phones, computers, routers, browsers, and smart devices can expose many accounts simultaneously. Keep them updated and remove unnecessary access.

Priority 4: Data exhaust

Old profiles, data brokers, forgotten cloud shares, unused apps, abandoned aliases, public documents, and stale permissions deserve cleanup after critical accounts are secured.

Priority 5: Convenience improvements

Once the basics are stable, refine browser separation, aliases, temporary tools, automation, privacy-friendly defaults, and recurring review schedules.

This order prevents a common mistake: spending hours optimizing minor tracking settings while the primary email account still uses a reused password.

Privacy Scenarios: Which Controls Matter Most?

Real-world privacy decisions are easier when you start from the task instead of the tool.

Scenario: A website requires an email for a free download

If the file is generic, the website is low risk, and you do not need future support or account recovery, a temporary inbox may be appropriate. Avoid providing a primary email, phone number, home address, and demographic data merely because the form asks for them. If the download itself is executable or unfamiliar, scan it and avoid opening unexpected attachments.

Scenario: You are buying something online

Use accurate delivery and payment information, but minimize optional marketing data. A stable email or alias is better than temporary email because shipping updates, refunds, warranty questions, and customer support may arrive later. Enable transaction alerts and verify the merchant domain before paying.

Scenario: You are joining a social network

Assume the account may become valuable even if it starts casually. Use stable recovery, a unique password, MFA, a secondary email or alias, and limited public profile information. Review contact syncing and location access before uploading an address book or granting continuous location permission.

Scenario: You are testing a registration flow

Do not copy real customer data into a test environment simply for convenience. Use fictional names and test records, and use a temporary inbox where the test only needs a verification message. Keep test and production databases separate and remove sample accounts when the test is finished.

Scenario: You need to send a document

Review the document before choosing a transfer method. Remove unnecessary pages, comments, metadata, and hidden information. Verify the recipient independently. If the file contains regulated, medical, legal, financial, or confidential business information, use the approved secure system for that context rather than choosing a temporary tool solely because it is convenient.

Scenario: You want to share a photo publicly

Review the foreground and background. Look for addresses, screens, badges, children's information, mirrors, tickets, license plates, and location clues. Compression can reduce file size and background removal can simplify an image, but neither is a substitute for a complete privacy review.

Scenario: A message says your bank account is locked

Do not click the link. Open the official banking app or a trusted bookmark and check the account there. If there is a real issue, resolve it inside the trusted channel. If there is no issue, report the message as phishing. This process works even when the fake message is visually convincing.

Scenario: A relative sends an urgent request for money

Do not rely on the message, caller ID, voice, or profile picture. Call a known number or contact another family member. Use a family verification phrase for unusual emergencies. Generative AI makes independent verification more important because audio and images can be manipulated.

Scenario: You lose your phone

Use device-locate and remote-lock features. Contact the carrier if needed. Review accounts that use the phone for MFA, remove mobile-wallet cards when appropriate, revoke suspicious sessions, and protect the number against unauthorized porting. A strong screen lock buys time but does not replace account recovery planning.

Scenario: A service announces a breach

First determine what information was exposed. A leaked email address requires a different response from a leaked Social Security number or password. Change affected and reused passwords, review MFA, watch for targeted phishing, monitor financial accounts, and consider credit protections when identity information was exposed.

Scenario: You are disposing of an old laptop

Back up needed files, sign out, remove the device from trusted-account lists, and use the manufacturer's secure reset or erasure process. Deleting visible files or emptying the recycle bin is not the same as preparing a device for resale or recycling.

What FreeTempTools Should and Should Not Do for Privacy

As the FreeTempTools catalog grows, each tool should have a clearly defined privacy role.

What the tools should do

They should solve a specific user task with minimal friction: create a disposable inbox, generate test data, transfer a file, scan a document, extract text, compress an image, remove a background, sign a PDF, inspect a public IP, or create a QR code.

They should also explain the limits of that task. A temporary inbox should explain that it is not for long-term recovery. A background remover should not imply that it strips metadata unless it actually does. A file-transfer tool should explain what happens to files, links, and retention according to its real implementation.

What the tools should not claim

No tool should promise complete anonymity, perfect security, guaranteed legal compliance, or protection from every form of tracking unless the implementation and evidence genuinely support that claim.

A user's privacy depends on the entire workflow: the information they provide, the service receiving it, their device, account security, network, recipient, retention, and future recovery needs.

This is why the Learning Center and the tools belong together. The tool completes the task; the guide explains how to use it responsibly and when another approach is safer.

A Five-Minute Privacy Triage

When you do not have time for a complete audit, use this order:

  1. Check your primary email for unknown sessions or forwarding rules.
  2. Confirm MFA is enabled on email and financial accounts.
  3. Check whether any important password is reused.
  4. Install critical device and browser updates.
  5. Review bank and credit-card alerts.
  6. Review recent recovery-method changes.
  7. Remove one suspicious or unused browser extension.
  8. Check public social profiles for unnecessary phone, email, location, or birth-date details.
  9. Review one major cloud-storage account for public links.
  10. Verify that you know how to freeze credit or report identity theft if needed.

These actions do not complete the full checklist, but they address several of the highest-impact failure points quickly.

Frequently asked questions

What are the most important online privacy steps?

Use unique passwords, MFA, updated software, protected recovery methods, careful phishing verification, and limited exposure of primary contact information.

Should I use a temporary email address?

Use temporary email for low-risk, disposable activity where future recovery is unnecessary. Use a permanent email for important accounts.

Does private browsing make me anonymous?

No. It mainly limits local browser history and does not hide activity from websites, networks, employers, schools, or internet providers.

Does a VPN make me anonymous?

No. A VPN changes the network path and visible IP address, but logins, cookies, browser signals, and other information may still identify or correlate activity.

Is public Wi-Fi safe?

Widespread website encryption has made public Wi-Fi generally safer than it was years ago, but users should still use encrypted websites, updated devices, and scam awareness.

How often should I review privacy settings?

Review critical settings every few months and after major device, account, platform, or life changes.

Is deleting an account enough to remove my data?

Not always. Providers may retain backups or records, and information already shared with third parties may remain.

Is temporary file sharing private?

It may reduce retention, but recipients can still copy content and provider security models vary. Do not use unapproved tools for regulated or highly sensitive information.

Is image compression a privacy tool?

Compression reduces file size. It does not automatically remove metadata or sensitive visible details.

Is AI safe for personal information?

It depends on the service, settings, retention policy, data use, and sensitivity of the information. Avoid uploading sensitive material to unapproved services.

What should I do after a data breach?

Verify the notice, identify what was exposed, change affected and reused passwords, review MFA and recovery, monitor accounts, and use official identity-theft resources when sensitive identity data was involved.

What is the difference between privacy and security?

Privacy concerns how information is collected, used, shared, and controlled. Security concerns protecting systems and information from unauthorized access or harm.

Authoritative references

Protect your inbox

Use a disposable address for the sign-ups that do not deserve your real one, and keep your personal email for accounts you need to keep.

Open Temp Mail →

Related guides

Complete Guide to Temporary EmailHow to Avoid Email SpamTemporary Email vs Personal Email