Privacy

What we collect, and how long we keep it.

Using inboxes without an account

You can use the site without signing up. Your IP address is used to apply rate limits. Free inboxes are public: anyone who knows an address can read its mail. Do not use them for anything sensitive.

If you create an account

We store the following, and administrators can see it:

  • Your username, and a one-way hash of your password. We cannot read your password.
  • The IP addresses you connect from, and the country and city they appear to be in.
  • Your browser, operating system and language, as your browser reports them.
  • A history of account activity, such as sign-ins, failed sign-ins and API keys created.
  • Your API keys' usage, private inboxes, domains you add, IMAP logins, support tickets and payments.

Email

Mail is deleted automatically after the retention period shown on the site. Administrators can read stored mail, including mail in private inboxes and on private customer domains, in order to run the service and handle abuse.

Domains that users choose to share are labelled Community. The person who owns a shared domain controls where its mail goes, so do not use one for anything important.

The site shows live activity: when the last code arrived, and which well-known services recently sent mail to each public domain. It only ever shows a service name and a time, never an address, a sender or message content. Mail in private inboxes and on customer domains is not counted.

Inbox rules you create run on your private inboxes and domains only. Mail a rule deletes is never stored.

Payments

Crypto payments are handled by a third-party payment gateway. We keep the plan, amount, coin and status of each payment. We do not receive card or wallet credentials.

How long we keep it

  • Account activity history: 90 days.
  • Server logs: 14 days.
  • Payment records: kept for bookkeeping, even after an account is deleted.

Deleting your data

You can delete your account at any time from your account page. This removes your profile, activity history, API keys, private inboxes, your domains and their mail, and support tickets.