No sign-up. Open and use. Inbox lifespan

Privacy policy

Save your access link—and know its limits.

A recovery link lets you reopen your inbox, so keep it safe. This policy explains what we process to receive mail, restore access and provide email forwarding, as well as the choices available to you.

Last updated: · Applies to temporary email and logged-in forwarding services on inboxswap.com

01 · What this policy covers

This policy covers your use of Inboxswap to open a temporary inbox, restore access with a link, create forwarding aliases after logging in, and view email records. It doesn’t replace the sender’s privacy policy or determine whether games, communities or other third parties accept temporary email addresses.

Temporary inboxes use inbox credentials for access and don’t require you to set up a forwarding account. Email forwarding, by contrast, uses a real email address to log in and forwards messages sent to your aliases to that address. If you’re deciding which to use, start with our guide to choosing a backup address for gaming For payments, identity information or recovery of important accounts, use an email address you control long term.

For privacy questions, contact us at support@inboxswap.com. We don’t make unverified claims about where data is stored, how it is encrypted, when backups are deleted or whether “no information is ever logged.”

02 · What information we process to provide the service

The table below groups information by purpose, so “no registration” isn’t mistaken for “no access credentials or email processing.” Temporary inbox tokens, account login credentials and email addresses each serve different purposes. Don’t treat them as interchangeable or share them in ordinary messages to others.

Emails are submitted by senders and may contain your name, device details or verification codes—information you didn’t provide to us directly. Consider how sensitive the messages might be before sharing an address, rather than waiting until sensitive content arrives to decide whether a temporary inbox is suitable.

Information, purpose and important limits
Information type How it’s used What you should know
Temporary email address Identifies the delivery destination and shows the currently available address in your inbox. Knowing the address doesn’t grant access, but it shouldn’t be treated as a guarantee of anonymity either.
Recovery token and local credentials Let your browser keep accessing the same temporary inbox and restore access on another device using a recovery link. Credentials grant access. Clearing browser data may remove access from this device, while a leaked link may expose your emails.
Login email and account credentials Send login verification codes, identify your forwarding account and grant access to its management features. Your login email is the forwarding destination. Logging out of the dashboard won’t delete it automatically.
Aliases and their status Link aliases to your login account and control whether incoming messages continue to be forwarded. Disabling or deleting an alias affects future incoming mail; it won’t recall messages already forwarded to your real email address.
Email content and delivery information Display the subject, sender, time and message content, and provide options to view and delete forwarding records. Emails may contain personal information provided by third parties. Don’t use this service for content you can’t afford to have exposed or lose.
Information required for requests Process network requests, authentication, rate limiting and troubleshooting. Requests may involve IP addresses, request times and client information. This isn’t a promise of zero logging. We don’t specify unverified log fields or a single retention period in this policy.

03 · A recovery link is a key

Temporary inbox credentials are stored locally in your browser, so you can access the same address after refreshing or reopening the page while it’s still valid. A recovery link carries the credentials needed to restore access. Opening it on another device may also grant access to the same inbox, without verifying your real email address first.

So closing the page doesn’t destroy the inbox, and logging out of your forwarding account doesn’t revoke temporary inbox credentials. Once an address expires, is replaced or is destroyed, access may not be recoverable. “Recoverable” means you can return with a valid access link while the address is active—not that data can be retrieved after expiry.

Keep it to yourself—don’t show it to others

Before sharing a screenshot, hide the recovery link and credentials as well as the address. Don’t paste a full link into a public support ticket. If you think a link has been exposed, stop using that address for sensitive emails and update the email address on the relevant platforms. Deleting the link from your own browser won’t invalidate copies others have saved.

On a shared computer, check for any saved access links before you leave. To understand the difference between clearing browser data and an address expiring, see our inbox lifespan and recovery guide.

04 · Retention and deletion are not the same

You can check how long a temporary inbox remains accessible using the live countdown beside the address and the status returned by the server. The 30-day record of forwarded emails belongs to the logged-in forwarding service; it doesn’t mean temporary inboxes are retained or recoverable for 30 days.

A delete action applies to the specific item selected. It shouldn’t be taken to mean that every system, backup or third-party copy is physically erased at the same time. For questions about backend retention or legally required processing not covered here, contact support rather than assuming deletion is immediate, permanent or irreversible.

3 hours

Starting time for a new temporary inbox

New addresses start with 3 hours. Check the inbox countdown for the actual time remaining. Saving a link won’t pause the clock.

+3 hours

Each successful extension

You can request an extra 3 hours before expiry. Check for a success message and an updated countdown; clicking the button alone doesn’t mean the extension worked.

30 days

Recent forwarding email records

The dashboard provides records of forwarded emails from the last 30 days. These aren’t a permanent archive, and they don’t affect how copies in your real inbox are retained.

Before taking action, check which kind of access you want to stop
Action What it affects What it doesn’t mean
Delete one email Removes that email from the relevant inbox or forwarding record. It doesn’t close the receiving address or remove copies held by the sender or in your real inbox.
Change address or destroy a temporary inbox Stops the old temporary inbox from being used to receive new mail. Changing the address creates a new inbox and requests destruction of the old one. Old emails won’t be moved to the new inbox, and an expired recovery link can’t restore the old inbox.
Disable or delete an alias Stops future normal forwarding to that alias or removes the alias itself. It doesn’t delete the forwarding archive, messages in your real inbox or your entire login account.
Log out or clear local data Logging out clears the current account’s session on this device. Clearing browser data may also remove access to a temporary inbox. This isn’t a server-side deletion request, and it can’t revoke credentials held on other devices.

If you want to stop receiving account security notifications at an address, first change the email address linked to the account on the relevant platform, then deal with the old address. Manage forwarding aliases and email records separately in the email forwarding dashboard.

05 · Email content and external resources

HTML emails are displayed in an isolated viewing area to reduce the effect of email styles or content on the Inboxswap interface. This doesn’t verify the sender’s identity or guarantee that the message, attachments or external websites are safe. The same display name doesn’t necessarily mean messages come from the same organisation.

Loading external images or other resources in an email may expose network request information to the resource provider. Links may also contain tracking parameters. Don’t trust a message just because it appears in your inbox. Check the destination domain before clicking, and never enter verification codes, passwords or recovery links on pages from unknown sources in an email.

Distinguish demo emails from real messages

The Steam verification code and Discord new-device notification on the home page are fictional Inboxswap demos created to illustrate the interface—not activity on your real accounts. Example codes, account names, devices and locations aren’t login credentials. Inboxswap isn’t affiliated with or endorsed by these brands.

A demo doesn’t mean a platform has agreed to accept our addresses, or that real emails will always be delivered. In your home inbox you can view clearly labelled demos alongside messages you’ve actually received. For important accounts, verify notifications directly through the platform’s official website or app.

06 · Choices available to you

You can choose not to use this service for sensitive emails, delete individual messages, stop using a temporary address, or disable or delete forwarding aliases in the dashboard. For a primary gaming account, an account with payment details or identity verification messages you may need to retrieve later, use an email address you control long term rather than relying on temporary inbox extensions.

If you use email forwarding, keep your real email account and login credentials secure, and consider enabling two-step verification in the dashboard. Before logging out, check whether you’re using a forwarding account or a temporary inbox. To keep access to a temporary inbox while it’s active, save the recovery link privately instead of sharing it publicly.

Questions about information, access or deletion

Email us at support@inboxswap.com and tell us whether your request concerns a temporary inbox or forwarding, what you’re asking about and roughly when it happened. We may need to verify how your request relates to the account or inbox. Don’t include verification codes, full tokens, recovery links or sensitive email content in your first message.

If you have questions about retention or deletion that aren’t answered here, ask us before deciding whether to use the service. The service’s rules and restrictions are set out separately in the Terms of Service.

We show the date this policy was last updated on this page. Before using the service again—especially before sharing an important email address—review this policy and the Terms of Service to check that the current limits work for you.