Privacy Policy

QuickInbox is a temporary email service. The short version: we collect as little as possible, keep it only as long as the inbox lives, and do not ask who you are.

What we store

• The generated address, a hashed session credential and expiry timestamps — enough to route incoming mail and let your browser session read it.
• Message content (text and sanitized HTML) for the lifetime of the inbox, then it is deleted by the scheduled cleanup job.
• Minimal operational events (for example: mail received, webhook rejected) with hashes and counters — never message bodies or verification codes.

What we do not do

• No accounts, no names, no passwords.
• We do not sell data or share message contents with advertisers.
• Analytics events never contain message bodies, codes, tokens or full addresses.
• Ad units never render on inbox or email views — ads appear only on public content pages.

Cookies

We set a single HttpOnly session cookie (qi_session) that proves your browser owns the inbox. It expires when the inbox does. QuickInbox itself sets no cross-site tracking cookies. The Google AdSense script loads on every page; Google may set its own cookies as described in its policies.

Retention

Inboxes and their messages expire after the advertised lifetime (10 minutes by default) and are physically removed by a scheduled cleanup job. Server logs may be kept briefly for security and abuse handling.

Security

Traffic is served over HTTPS. Email HTML is sanitized and rendered in a sandboxed iframe. Webhooks from our mail provider are verified by signature. No system is perfect — do not send sensitive information to a temporary address.

Contact

Questions about this policy? Use the contact page or report misuse via the abuse form.