Privacy

What we collect, and how long we keep it.

Using inboxes without an account

You can use the site without signing up. Your IP address is used to apply rate limits. Free inboxes are public: anyone who knows an address can read its mail. Do not use them for anything sensitive.

If you create an account

We store the following, and administrators can see it:

  • Your username, and a one-way hash of your password. We cannot read your password.
  • The IP addresses you connect from, and the country and city they appear to be in.
  • Your browser, operating system and language, as your browser reports them.
  • A history of account activity, such as sign-ins, failed sign-ins and API keys created.
  • Your API keys' usage, private inboxes, IMAP logins, support tickets and payments.

Email

Mail is deleted automatically after the retention period shown on the site. Administrators can read stored mail, including mail in private inboxes, in order to run the service and handle abuse.

Payments

Crypto payments are handled by a third-party payment gateway. We keep the plan, amount, coin and status of each payment. We do not receive card or wallet credentials.

How long we keep it

  • Account activity history: 90 days.
  • Server logs: 14 days.
  • Payment records: kept for bookkeeping, even after an account is deleted.

Deleting your data

You can delete your account at any time from your account page. This removes your profile, activity history, API keys, private inboxes and support tickets.