Privacy protection and email retention

A separate receiving address helps you share your primary email address with fewer websites during one-off or short-term use. This limits exposure of your main inbox address; it does not hide your network identity or stop a website from collecting other information.

To receive and display email, this service retains recipient addresses, sender information, selected message headers, and plain text or cleaned HTML bodies. Attachments are skipped and are not saved or offered for download. Account features also process your account email, password hash, sessions, and subscription status.

An anonymous inbox is protected by a secret access token stored in your browser. Anyone who obtains that token can access the anonymous inbox. Account-owned inboxes require the owning account session.

Expiry immediately prevents access through the application. Deletion of stored objects runs asynchronously, so physical removal and storage quota release can take longer when cleanup is busy. Infrastructure backups and lifecycle policies may have separate retention periods.

When mail forwarding to another backend is enabled, the receiving service temporarily buffers raw messages and envelope details in private storage for delivery retries. Successfully delivered copies are cleaned up; failed or expired copies follow the configured buffer retention and asynchronous deletion policy.

Verification email, bot protection, hosting, and optional payment processing involve the providers configured by the operator. Email is not end-to-end encrypted by this service. Avoid sending sensitive documents or secrets to a temporary inbox.

Optional Google Analytics page visit measurement loads only after your consent and may use cookies and device, browser and visit data. We do not send email addresses, message bodies or access credentials to analytics. Page URLs exclude query parameters and fragments. You can decline or withdraw consent using Analytics settings in the footer without affecting your inbox.