Temporary Email Privacy: Cookies, Data & Retention

Temporary email can keep your permanent address out of an unfamiliar mailing list, but it does not make email anonymous or suitable for sensitive information.

Create an address

Data used to operate a mailbox

For an active mailbox, InboxFlick stores the temporary address, a one-way hash of its access token, the IP address that created it, expiry timestamps, and received message content. The creation IP is used to enforce anti-abuse limits. The plain access token is not written to the mailbox database.

Data kept in your browser

The active access credential is delivered as a Secure, HttpOnly cookie. The interface also keeps non-secret mailbox details such as an address, identifier, and expiry time in local storage so it can display the account list. Clearing site data can remove your ability to reach an inbox, and the service cannot issue a replacement credential.

Chrome extension data and permissions

The InboxFlick Chrome extension handles the temporary address, mailbox identifier, and expiry timestamps only to create a mailbox, copy its address, and open the matching inbox. It uses host access only for HTTPS requests to inboxflick.com and clipboard write only after you click Copy address. It does not read your clipboard, browsing history, current page, email message bodies, or the HttpOnly possession cookie; it does not use extension storage, content scripts, advertising, or extension analytics. InboxFlick's use of information received through the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Message processing and remote content

Incoming mail is stored while the mailbox is active and processed so it can be displayed. Message HTML is sanitized: scripts, forms, and remote tracking resources are removed. Attachments are not stored or offered for download in the current version.

Expiry, destruction, and deletion

Manual destruction or expiry makes the inbox unavailable. Cleanup then permanently deletes messages and the mailbox record, including the creation IP attached to it. The precise cleanup moment can follow the background worker schedule, so do not treat the countdown as a secure-delete timer for sensitive material.

Operational, performance, and analytics data

Web requests necessarily expose network and browser metadata to the hosting and delivery infrastructure. InboxFlick may use Cloudflare's performance beacon to measure reliability and speed. During the current testing stage, Google Analytics loads automatically when configured and may process the page URL, referrer, browser and device information, approximate location, interaction events, and first-party analytics identifiers. Advertising storage, ad personalization, and Google Signals remain disabled. Security logs needed to detect abuse can follow operational retention controls rather than the mailbox countdown.

Choose a permanent address for important accounts

Do not use a temporary inbox for banking, employment, healthcare, paid purchases, identity checks, password recovery, or any account you cannot abandon. Email is normally delivered in plain routing infrastructure and a sender may retain its own copy independently of InboxFlick.

Temporary inbox

Free temp mail with a live inbox

Keep this page open after creating an address. New messages will appear automatically.

Create an address