Privacy Policy

What we store

• Your inbox: the address, a hashed version of its secret key, and its creation and expiry times.
• Messages: the sender, subject, and body of emails sent to your address.
• Abuse prevention: a hashed (not raw) form of your IP address when you create an inbox, used to limit how many inboxes can be created per hour.

What stays in your browser

Your address and its secret key are saved in your browser’s local storage so a page refresh keeps your inbox. Clearing your browser data removes them.

How long we keep it

Inboxes last 10 minutes and can be extended up to 60 minutes in total. When an inbox expires, it and all its messages are deleted from our database, usually within a minute. Emails sent to an expired address are discarded.

Email delivery partner

Incoming mail is received through a third-party email delivery provider before it reaches us. That provider may keep its own delivery records according to its own retention policy.

No tracking

We do not use advertising trackers, analytics scripts, or tracking cookies. Remote images inside emails are blocked so senders cannot use tracking pixels.

Your choices

You can delete your inbox at any time with the New or Delete buttons. Questions? Email contact@mailiffy.online.