How we handle your email data

01 · What this policy covers

This policy applies to the temporary email, email verification-code login, long-term forwarding aliases and related email archive features provided at hushinbox.com. It also covers information you send to our support email about these services. Registration pages on other websites, email senders and your primary email provider are each governed by their own privacy policies.

Temporary email requires no registration: access time-limited inboxes with an access credential;long-term forwarding requires verifying an email address where you can receive messages, so we can link aliases to their delivery destination. No registration does not mean complete anonymity or that email content, network requests or senders cannot identify you.

Only submit information needed to complete your task. Don’t use a temporary address for sensitive identity documents, financial information or account recovery emails for important accounts. See the Terms of Service for the scope and limits of using the service.

02 · What data the service handles

Temporary addresses and access credentials

When you create a temporary inbox, the service generates an address, access credential and expiry time to receive email, verify access and allow you to extend or delete the inbox. The access credential grants real access: sharing it could let someone else access that inbox.

Email content and attachments

To display or forward email, the service processes the sender, recipient address, subject, received time, message body and any attachments. Senders provide this content, which may include personal information you didn’t submit to this site. Consider its sensitivity before sending or requesting an email.

Login email and account verification details

Long-term forwarding sends a login verification code to your login email and links that address to your account as the forwarding destination. If you enable two-step verification, the service also maintains your authenticator configuration and verifies one-time codes. Never send your authenticator secret or a valid verification code by email to support.

Forwarding aliases and delivery status

The service stores alias addresses, their associated accounts and whether they’re enabled to determine where incoming messages go, whether delivery should stop and which records to provide. Forwarding status and necessary delivery information help show results and troubleshoot failures; on their own, they cannot prove that a website leaked or sold your email address.

Essential service information and support messages

Requests and operational information are needed to process requests, verify credentials, prevent abuse and troubleshoot problems. We don’t claim to keep “zero logs”, nor do we list unverified items such as device fingerprints, precise location or contacts as data we routinely collect.

If you contact support, we receive the email address you use and the contents of your message to understand and handle your request. Please include the time, page and error you encountered, and avoid attaching full email contents or unrelated personal information.

03 · How long data is kept

Temporary inboxes remain available until their actual expiry time. Forwarding archives have a separate 30-day retention period. Check the toolbar countdown and dashboard records; don’t assume you can recover an email based only on product descriptions.

The periods below apply to different things and are not interchangeable. In particular, an expired forwarding archive does not mean an account or alias is automatically deleted, and extending a temporary inbox does not extend a forwarding archive.

Don’t use Hushinbox as your only email backup. Save anything you need to keep to an appropriate location under your control before it expires, then manage its security and deletion yourself.

04 · Browser storage and login sessions

Browser storage remembers your temporary email address, access credential and expiry information so you can restore your inbox when you reopen the page. Long-term forwarding uses separate local records for its login token and login email. Signing out of long-term forwarding does not destroy your temporary inbox.

The page also remembers your language preference and uses session storage to remember the real email you most recently chose to read, reducing repeated actions after a refresh. This reading selection is only interface state, not an offline backup of the email or an extension of its retention period.

Selecting Sign out in the dashboard clears the formal login credential and login email saved in this browser. It does not delete your account, aliases or archive, nor does it sign you out on other devices. Sign out and close the page after using a shared device.

You can clear this site’s local records in your browser’s website data settings. After clearing them, you may no longer be able to access the original temporary inbox, but that does not destroy the server-side inbox: it remains subject to its original expiry. Any active long-term forwarding aliases also remain enabled.

05 · Limits of email access and forwarding

To receive, archive and forward email, the service must receive and process its contents on the server, then send eligible messages to your main inbox. This is not end-to-end encrypted communication where only the sender and recipient hold the keys, so we cannot promise that the server is unable to access email content.

Real HTML emails are sanitized and displayed in a restricted sandbox to reduce the impact of email code on our pages. These safeguards cannot verify that an email is genuine or eliminate the risks of phishing, malicious attachments or social engineering.

Remote images, tracking pixels and external links may disclose information such as when you accessed a message and your network address to third parties. Sandboxed display does not mean all external requests are blocked. Use your judgment before loading external content, opening links or downloading files.

Your destination email provider also processes forwarded copies, and your email app may load external images. Manage risk using its privacy and image-loading settings, and don’t judge whether a message is genuine by its brand logos alone.

For explanations of spam, phishing and tracking, see the Spam glossary. Before using an “unsubscribe” link in an unfamiliar email, check where it came from. See Unsubscribe or change address for details.

06 · How you can control your data

Delete, disable and sign out address different needs. Before taking action, decide whether you want to remove messages already received, stop future incoming mail or simply end access on this device.

If content you want to delete has already been downloaded, forwarded or saved by the sender, actions on this site won’t automatically remove those copies. You’ll need to handle them separately on the relevant device or service.

Delete an individual email

Use the delete action in the email details to remove a temporary email or forwarding archive from this site. It won’t stop future messages to the address or recall forwarded copies in your main inbox.

Replace or destroy a temporary inbox

Destroying an inbox affects the whole temporary inbox, not just one email. “Get a new address” on the home page creates a new inbox first, then requests destruction of the old one. If destruction of the old inbox isn’t confirmed, follow the instructions on the page. The old inbox remains subject to its original expiry; closing the page does not destroy it.

Disable a forwarding alias

Pausing an alias in the dashboard stops forwarding all incoming messages to that address, not just promotional email. It doesn’t delete existing archives. Re-enabling the alias won’t recover messages discarded while it was disabled.

Delete a forwarding alias

Deleting an alias removes that alias; it doesn’t delete the entire account or all historical archives. To remove saved email records too, find and delete the archives separately. Don’t assume a deleted address can be restored with the same name.

Sign out

Signing out ends the login session saved in this browser, but does not stop aliases that remain enabled on the server. If you want to stop receiving email, disable or delete the relevant alias before signing out.

Manage current temporary emails in your temporary inbox, or go to the long-term forwarding dashboard to manage aliases and archives. For account data access, correction or deletion requests not available in the interface, contact support and specify what you need. To prevent accidental deletion or disclosure, we may need to verify that you control the relevant account.

07 · Contact support and policy updates

For questions about this policy, specific data handling or how to control your data, email support@hushinbox.com. Tell us whether you use temporary email or long-term forwarding, when the issue occurred and what data you want us to locate or handle. Don’t attach a complete sensitive email in your first message.

Support staff will never need a valid login verification code, authenticator secret, login token or full temporary inbox access credential. If further verification is necessary, we’ll explain an appropriate method. Don’t send information that would directly grant account access just to describe a problem.

If the way the service handles data changes, we’ll update this page and the date at the top. The terms for using the service and this privacy policy complement each other but do not replace one another. Please also read the separate Terms of Service.