Privacy Policy

• Inbox addresses you create or link, plus which anonymous browser session they belong to.
• Received messages — sender, subject, body, and arrival time — each deleted automatically 90 days after arrival, on any inbox plan.
• Rate-limit records — network identifiers with timestamps, kept briefly to enforce fair-use limits and then discarded.

We collect no names, no emails of your own, no accounts, and no passwords — there is nothing to sign up with, so there is nothing to leak about you.

Traffic is served through Cloudflare, which processes requests as our hosting and security provider. Inbox creation passes a Cloudflare bot check. There is no advertising, no analytics beacon, and no tracker on these pages — nothing is sold or shared.

Each inbox lives exactly as long as its plan says — 3, 7, 30, 90, or 180 days from creation or last renewal, or until you remove it. Messages live at most 90 days from arrival whatever the plan, and an expiring inbox takes its remaining messages with it. Expired inboxes, aged-out messages, and their transfer codes are permanently deleted by a nightly purge. Struck messages are deleted immediately.

Deletion is self-service and instant: strike a message to delete it, remove an inbox to unlink it, and let expiry purge the rest. Because we hold no identity records, access or portability requests have nothing to attach to — if you can open the inbox in your browser, it is yours; otherwise it is nobody's.