Privacy notice · Clear rules on retention and deletion

What happens
when an address expires

Temporary addresses and their emails expire together. Your forwarding account does not. First check which service you’re using, then decide what to keep and where to delete it.

Last updated:

01 / What this notice covers

This notice applies when you use an anonymous temporary inbox, sign in to a forwarding account, or browse inboxtick.com. Temporary inboxes use a dedicated access credential, while forwarding accounts are identified by your login email. They use separate data and access systems.

We process information needed to provide these features, such as temporary addresses and received emails, forwarding destination addresses, alias settings, and technical information used to connect requests and troubleshoot security issues. Website operations may involve technical logs such as IP addresses, browser details, and request times. These are separate from email content retention periods, and we don’t promise a single additional deletion timeframe for them.

This notice was updated on October 26, 2026. For questions about data handling, deletion requests, or this notice, contact support@inboxtick.com; for information about service limits, see our Terms of Service.

02 / A temporary inbox, from creation to expiration

Open the home inbox and, once connected, a random address will be created along with its actual time remaining. You don’t need to sign up with a personal email address, but your browser must hold the inbox credential so you can view and manage the inbox.

  1. Create: get an address and access credential

    New inboxes are valid for 3 hours. Wait for the actual address to appear on the page before copying it. Don’t treat demo emails as messages that were really delivered.

  2. Receive: view emails before the timer runs out

    Emails sent to the address appear in the inbox. You can read or delete individual messages; deleting an email doesn’t change when the address expires.

  3. Extend: add 3 hours each time

    Choose “Extend by 3 hours” in the inbox to keep the current address and existing emails while adding time. The countdown shown after a successful extension is the one to follow. Closing the webpage won’t pause it.

  4. Finish: let it expire or switch addresses

    When the timer runs out, the temporary address and its emails are deleted together. “Get a new address” creates a new inbox before deleting the old one; the new address can’t restore old emails.

Don’t use an address that will expire for accounts you may need to recover, contact support about, or receive bills from. First, use the coupon signup guide to decide whether you only need a one-time email. For accounts you’ll keep using, choose your own email address or a forwarding alias.

03 / Forwarding accounts handle a different set of data

Long-term forwarding requires signing in with an email verification code. Aliases you create after signing in forward incoming messages to your personal email and make an email archive available in the dashboard. This isn’t an extended version of the anonymous temporary inbox.

Login email and verification
Your login email receives sign-in codes, identifies your account, and serves as the forwarding destination. Verification codes and login credentials confirm access. Never share them with support staff or anyone else.
Alias settings
The alias prefix, account it belongs to, and active status determine how incoming messages are handled. Disabling an alias stops its forwarding; deleting an alias is a separate action and doesn’t delete the entire account.
Forwarded email records
Records include the sender, subject, time, forwarding status, and email content available for viewing, helping you review delivery and troubleshoot issues. Forwarding archives in the dashboard are kept for 30 days, and you can delete records sooner.
Two-step verification settings
When enabled, settings such as your authenticator key are used to verify one-time codes generated by a mobile app. Apps such as Google Authenticator, Microsoft Authenticator, or 1Password can scan the setup QR code; then enter the 6-digit code to enable verification. Don’t share the QR code or key.

You can manage these settings in the forwarding dashboard. Signing out only removes the account access state from your current browser. It doesn’t automatically delete aliases, archives, or two-step verification settings.

04 / How long data is kept and what deletion affects

Retention rules vary by data type; there isn’t one countdown for everything. The 3-hour temporary inbox, 30-day forwarding archive, and account settings are separate.

Data retention and deletion at a glance
Data type Retention rule Your options and limits
Temporary addresses and emails Valid for 3 hours when created. Each extension adds 3 hours; the address and emails are deleted together when it expires. Delete individual emails, or choose “Get a new address” to replace and delete the old inbox. We can’t control copies you’ve saved elsewhere.
Forwarding email archive Kept for 30 days; you can delete records sooner. Deleting an archive in the forwarding dashboard won’t recall copies already delivered to your personal email. Manage those copies in that email account.
Login email and alias settings Used to keep account and forwarding features running. They aren’t automatically deleted when a temporary inbox expires or a 30-day archive period ends. Delete aliases in the dashboard. For account data requests, contact support. Signing out doesn’t delete your account.
Two-step verification settings Used to verify account codes and aren’t subject to temporary inbox expiration rules. Turn off two-step verification in the forwarding dashboard using a verification code. Turning it off doesn’t delete your account or email records.
Browser access credentials Used to restore an inbox or sign-in state, depending on whether the relevant credential is still valid and browser storage remains intact. Signing out or clearing site data can remove local access, but doesn’t confirm that server-side data has been deleted.

This table describes the product’s stated retention and deletion rules. It doesn’t promise a timeframe for clearing backups or immediate deletion of all technical records. For requests involving account data, specific records, or a deletion option you can’t access, contact support with details. Simply closing the page doesn’t delete data.

05 / Browser credentials and email content need different protections

Local credentials are access keys, not proof of anonymity

Your browser stores the credentials needed to keep temporary inboxes and account sessions available, so you don’t have to start over each time. Temporary inbox credentials and forwarding account login credentials are separate. Anyone with a valid credential may gain the corresponding access, so don’t share links containing credentials, screenshots of stored data, or complete debug logs.

After using a forwarding account on a shared device, sign out and check for sensitive emails or downloaded files. Clearing site data may remove your temporary inbox access credential, but it doesn’t delete the inbox early. Closing a tab doesn’t immediately delete emails from the server.

HTML is isolated for display, but email content isn’t necessarily trustworthy

After sanitization, HTML in real emails is shown in a separate sandboxed frame. Plain-text emails are displayed as text to reduce the risk of email content affecting the website. This doesn’t verify the sender’s identity, link destinations, or attachment safety. Seeing a brand name or verification code doesn’t mean an email is genuine.

Never enter your primary email password or payment details on a page opened from an unfamiliar email, and don’t run attachments from unknown sources. “Spam protection” at Inboxtick means using temporary addresses or forwarding aliases to separate incoming mail—not anonymity, end-to-end encryption, or absolute security. Choose a communication method that meets your security needs when sharing sensitive information.

06 / Actions you can take

First, confirm whether you want to delete one email, an address, or account data. Each has a different option and effect. After deleting something, don’t rely on the original address to receive password recovery or support emails.

  • Delete a temporary email: Go to the home inbox, open the email, and select “Delete” in its details. Demo emails are removed only from this page; no real email or account is changed.
  • Delete the current temporary inbox: In the same inbox, select “Get a new address.” Once the replacement succeeds, the old address and emails are deleted. You can also wait for the inbox to expire. Save anything you need first.
  • Delete an alias or forwarding archive: Go to the forwarding dashboard and take action from the alias row or the relevant archive details. To pause future forwarding, disable the alias first; disabling it is not the same as deleting it.
  • Sign out of your account: Use the sign-out button in the forwarding dashboard to end the current browser session. Aliases will continue working as configured. If you no longer want messages forwarded, disable or delete the alias first.
  • Request account data: Email the support address below and specify what data you’d like to access or delete. We may need to verify account ownership to prevent deleting someone else’s data. Don’t send verification codes, authenticator keys, or login credentials.

Not sure what was deleted? Write to us with the details.

Include the relevant account email, time of the action, feature used, and any error message. Blur email content and sensitive information in screenshots. We’ll reply by email; we don’t promise a fixed response time.

Before choosing, check what you need: a temporary address can receive a one-time verification code, but ongoing account recovery, support, and billing need an email address you can keep accessing. To compare options, see Unsubscribe, filter, temporary address, or forwarding alias?.