Privacy Policy

Last updated: August 3, 2026

InboxNow ("we", "us") provides a free temp mail and temporary email service at inboxnow.xyz. This policy explains, in plain language, what information we handle when you use our disposable email service, why we handle it, and what choices and limitations apply. Because InboxNow is designed around collecting as little as possible, this policy is shorter than most, that's intentional, not an oversight.

What we collect

• The disposable email address you generate or choose, and any messages sent to it.
• Standard server logs (IP address, timestamp, user agent) kept for abuse prevention and security monitoring.
• We do not require or request your name, real email address, phone number, or payment details.
• We do not use account registration, so there is no profile, password, or persistent identity for us to store.

How long we keep data

Temporary inboxes and the messages inside them are automatically and permanently deleted 1 hour after creation, or immediately if you click Delete. We do not archive or back up expired inbox content, and once an inbox expires there is no way for us, or anyone else, to recover it. Server logs used for abuse prevention are retained only as long as reasonably necessary for that purpose and are not linked to any inbox content.

How we use data

Message content is only used to display your inbox to you in your browser. We do not read, sell, or share the contents of your temporary inbox with third parties, and we do not use inbox content for advertising, profiling, or analytics of any kind.

Cookies and third parties

InboxNow loads web fonts from Google Fonts to render the site's typography. We do not use advertising cookies, tracking pixels, or third-party analytics scripts. If that changes in the future, this policy will be updated to reflect it before the change takes effect.

Definitions

A few terms used throughout this policy are worth defining plainly. "Temporary" and "disposable" both mean the same thing here: an inbox that is intentionally short-lived by design, not just by accident. "Expire" means the address and its messages are permanently deleted from our systems and cannot be recovered by us, by you, or by anyone else. "Personal information," for the purposes of this policy, refers to anything that could identify you individually, a category we deliberately avoid collecting in the first place.

Data we never collect

It's easier to describe InboxNow by what it doesn't ask for. We never request your name, date of birth, physical address, phone number, government ID, payment information, or a password. We don't use cookies to build an advertising profile, and we don't ask you to connect a social media or third-party account. If a future feature ever required collecting something beyond this list, we would update this policy first and clearly explain why.

How this compares to a regular email provider

A typical email provider like Gmail or Outlook is built around identity: they know your name, your login history, your contacts, and often your phone number for account recovery, because the whole product depends on that inbox belonging to you permanently. InboxNow is built around the opposite goal. There's no account to recover, because there's no account. There's no login history to store, because there's no login. The tradeoff is straightforward, you give up long-term access and support in exchange for an inbox that asks nothing of you and disappears cleanly when you're done.

Do Not Track signals

Because InboxNow does not run tracking scripts or advertising cookies, Do Not Track browser signals have no practical effect on your experience here, there is no cross-site tracking behavior for such a signal to disable.

Your rights and choices

Since we don't hold an account or profile tied to you, most of the usual data-subject requests (access, correction, deletion of a stored profile) don't apply in the traditional sense, there's nothing persistent to access or correct. The one meaningful control you always have is immediate: click Delete on any inbox to permanently erase it and its messages on demand, rather than waiting for the one-hour automatic expiry.

Data security

We apply reasonable technical safeguards to protect the service and the messages that pass through it, including running the mail receiver and API behind standard network security practices and rendering received messages in a sandboxed viewer so embedded content cannot execute against your browser. That said, no online service can guarantee absolute security, and because temporary inboxes are accessible to anyone who knows or guesses the address, you should treat them as public rather than private.

Children's privacy

InboxNow is not directed at children, does not knowingly collect personal information from children, and does not request age, name, or identity information from any user, which makes it structurally unsuitable for the kind of profiling children's-privacy laws are designed to prevent.

International users

InboxNow can be used from anywhere with an internet connection. Because we collect only the minimal data described above and do not require identity information, most international data-protection frameworks (such as GDPR in the EU/UK) apply narrowly to the limited server logs we retain, rather than to any personal profile, since we don't build one.

Your responsibility

Because inboxes are temporary and public in nature (anyone who guesses or is given the address can view its mail), do not use InboxNow for sensitive, financial, medical, legal, or long-term accounts. Treat a temp mail address the way you'd treat a shared, disposable mailbox, useful for a single low-stakes task, not for anything you'll need to access securely later.

Legal basis for processing (GDPR)

For users in the EU/UK, the limited server logs described above are processed under our legitimate interest in keeping the service secure and preventing abuse. We do not rely on consent-based marketing processing because we do not send marketing communications, and we do not perform any automated decision-making or profiling based on your use of InboxNow.

Marketing communications

InboxNow does not collect an email address that could be used to contact you, so we never send marketing emails, newsletters, or promotional messages of any kind. There is nothing to opt out of, because nothing is ever sent.

Automated decision-making

We do not use your data to make automated decisions that produce legal or similarly significant effects on you. The service simply generates an inbox, delivers matching mail to it, and deletes it on schedule, there is no profiling or scoring involved.

Changes to this policy

If we materially change how InboxNow handles data, we'll update the "Last updated" date above and revise this page accordingly. We encourage checking back periodically if you use the service regularly.

California privacy rights (CCPA)

California residents generally have the right to know what personal information a business collects, to request its deletion, and to opt out of its sale. InboxNow does not sell personal information, and because we don't collect identifying information in the first place, there is effectively no personal-information profile tied to you for us to disclose or delete beyond the temporary inbox content you can already erase yourself with the Delete button.

Cross-border data transfers

Our infrastructure may process data in different countries depending on where our hosting and network providers operate. Because the data involved is limited to temporary inbox content and basic technical logs rather than identifying personal information, cross-border transfer concerns that apply to typical personal-data processing are substantially reduced here.

Third-party service providers

Running InboxNow requires basic infrastructure, hosting, network connectivity, and the Google Fonts service used for typography. These providers may process minimal technical data (like IP addresses) as part of delivering their infrastructure service to us, but we do not sell, rent, or share your temporary inbox content with any of them for marketing or advertising purposes.

Data breach notification

Because InboxNow does not collect identifying personal information, the practical impact of any security incident is limited to the contents of active, unexpired temporary inboxes and basic server logs. If we ever become aware of an incident that could meaningfully affect users, we will post a notice on this site describing what happened and what we're doing about it.

Summary

In short: InboxNow collects the bare minimum needed to run a temporary email service, the address you use, the mail sent to it, and basic abuse-prevention logs, and deletes all of it automatically within an hour, or instantly if you ask us to. There's no account, no profile, no marketing list, and no long-term record tying any of it back to you.

Contact

Questions about this policy can be sent to dev@prosper-fi.com.

See also our Terms of Service and FAQ.