Privacy Policy

Last updated: June 2026

1. What We Collect

Using the free, no-signup version of InboxMail doesn't require an account, so we don't collect names, passwords, or personal identifiers for that usage. If you create an account (required for Plus/Pro plans), we additionally collect your email address and a securely hashed password. When you use the service, we temporarily process:

  • The temporary email address generated for your session
  • Email content (subject, body, sender) received at that address
  • Standard server logs (IP address, browser type) for security and abuse prevention
  • For paid accounts: your subscription status and billing history (handled by our payment processor, Lemon Squeezy — see Section 4)

2. How Long We Keep Data

Temporary inboxes and their messages are automatically deleted after their plan's retention window (currently up to 10 minutes on Free, 1 hour on Plus, and 24 hours on Pro). We do not maintain long-term backups of email content. Account data (email, password hash, subscription tier) is retained as long as your account exists, and deleted upon request.

3. How We Use Data

Data is used solely to operate the service: routing received emails to your temporary inbox, displaying them to you, enabling outbound sending on paid plans, and managing your subscription. We do not sell, rent, or share your data with third parties for marketing purposes.

4. Third-Party Services

We use the following infrastructure providers to operate InboxMail:

  • Cloudflare — hosting, email routing, and storage
  • Resend — outbound email delivery
  • Cloudflare Turnstile — spam/bot protection (no tracking cookies)
  • Lemon Squeezy — payment processing for Plus/Pro subscriptions. As our Merchant of Record, Lemon Squeezy collects and processes your payment details (card info, billing address) directly — we never see or store your full card number. See Lemon Squeezy's own privacy policy for how they handle this data.

These providers may process data per their own privacy policies.

5. Advertising

If ads are displayed on this site, they may be served by third-party ad networks (such as Google AdSense) that use cookies to serve relevant ads based on your visit to this and other websites. You can opt out of personalized advertising via your browser or ad network settings.

6. Your Responsibility

Do not use InboxMail to receive sensitive personal information, financial account access, or anything you cannot afford to have publicly accessible — temporary inboxes are not secure long-term storage and content may be visible to anyone with the address during its active window.

7. Contact

For privacy questions, contact us via the feedback option on our homepage.