Privacy
Privacy Policy
InboxForNow provides temporary, receive-only email inboxes. We do not ask for an account and we do not require your real email address.
What we store
We store generated inbox addresses and received email content while an inbox is active. Access ends when the timer expires or you delete the inbox. Expired inboxes and messages are hard-deleted by scheduled cleanup that runs every 5 minutes.
What we do not log
We do not intentionally log visitor IP addresses, sell personal data, or use third-party tracking cookies. The app uses localStorage to remember your theme, lightweight preferences, and recent address records on your device.
Keeping your inbox in this tab
The active inbox identifier is saved in sessionStorage so this tab can reconnect after a reload or a visit to a guide. The identifier is sent to our API to retrieve that mailbox; it is not placed in the page URL. The server rechecks expiry, and browser storage cannot extend the inbox timer. We clear the selected identifier when the app observes expiry or deletion. Browser session restore may retain tab storage. Anyone who controls the tab or its inbox identifier may read the active mailbox.
Message bodies are held in the page while you use it, not saved in localStorage or sessionStorage. If browser storage is blocked, the tool still works in memory but cannot retain the inbox selection through reloads.
Email content
Email HTML is sanitized before display. Attachments are dropped. Access ends at the inbox deadline; scheduled cleanup removes expired content.
Sub-processors
InboxForNow runs on Cloudflare, including Cloudflare Pages, Workers, D1, Email Routing, Turnstile, and Web Analytics. Cloudflare processes traffic and infrastructure events needed to operate the service.
Contact
For privacy requests, contact the site owner through the administrative email configured for inboxfornow.com.
Privacy FAQ
Do you log IP addresses?
No. InboxForNow does not intentionally log visitor IP addresses. Cloudflare, our edge provider, processes traffic-level events needed to operate the service and absorb abuse, but those records are not joined to your inbox or shared with us as a personal profile.
How long is email content stored?
Until the inbox timer expires or you delete the inbox — whichever comes first. A scheduled cleanup runs every 5 minutes and hard-deletes expired inboxes and messages from the database. There is no archive and no soft-delete.
Do you set tracking cookies or run third-party analytics?
No tracking cookies. We use Cloudflare Web Analytics, which is cookieless and does not fingerprint visitors. The app uses localStorage for your theme, UI preferences and recent address records. Session storage holds the active inbox identifier for this tab; it is sent to our API to reconnect to your mailbox. Message bodies are not saved in either browser store.
Can the InboxForNow team read mail sent to my temporary inbox?
Operators have database access for abuse-handling and debugging, but we do not routinely read inbox content. Treat any verification code as readable by anyone who controls the infrastructure — for high-stakes accounts, use your real email.
Do you sell or share data with advertisers?
No. We do not sell personal data, do not run programmatic ad networks, and do not share inbox content with third parties. The service has no ad slots at launch.