Frequently Asked Questions

Everything you need to know about security, privacy, and how tempinbox.cloud works.

Privacy & Zero-Knowledge

Does tempinbox.cloud log my IP address?
Logs are kept strictly for security purposes for 14 days and are never linked to your email address or content. We prioritize your anonymity.
Are emails encrypted on the server?
Yes. We use a Zero-Knowledge policy. Encryption keys are generated in your browser when you create a mailbox. We, as the service provider, cannot read your messages.
How long is the mailbox active?
The mailbox remains active for 24 hours by default. You can extend this once for another 24 hours for free, or upgrade for $1 (LTC/DOGE) to extend it by 30 days (this can be done multiple times). You can safely close your browser or restart your device; access to your inbox will be preserved as long as it hasn't expired..
Where are your servers located?
Our infrastructure is hosted in Poland and Germany, adhering to strict European privacy standards.
Is the service available via Tor (.onion)?
Not currently, but we are planning to introduce a Tor hidden service in the future.
Can administrators see my emails?
No. Due to our client-side encryption (Zero-Knowledge) architecture, no one but the mailbox owner possesses the keys to decrypt and view the content.

Anti-Blocking & Usage

Can I use this for Steam/Netflix/Amazon accounts?
Yes, you can receive verification codes. However, please note that once the inbox expires, you will not be able to reset passwords or recover that account.
How do I bypass 'disposable email' blocks on trial sites?
Some services maintain strict blacklists. If a specific domain is blocked, try generating a new inbox to get a different domain. We frequently rotate our domain pool to stay ahead of blocklists.
Are your domains blacklisted by major services?
According to current data, our domains are clean. However, this is a constant battle; if you encounter an issue, please report it so we can update our pool.
Why do some sites reject my address?
Sites sometimes block entire domain extensions or verify IP reputation. If this happens, clearing your localstorage and generating a new mailbox often resolves the issue.

Ethics & Business

Do you sell my data?
Never. Our business model relies on premium features and donations, not data trading. We use self-hosted analytics (Umami) and have no third-party trackers.
How do you make money if it's free?
This project is part of a portfolio. Server costs are covered by optional Premium upgrades ($1 USD via LTC/DOGE) and strictly vetted partnerships.
Is the project Open Source?
The software is currently closed-source, but we plan to release it as open-source software in the future to verify our security claims.
Do you cooperate with law enforcement?
We cannot provide data we do not have. Content is encrypted client-side, and we do not track personal identities. We comply with valid Polish/German legal requests but have no readable data to hand over.

Security & Safety

Does using a temp mail protect me from phishing?
It acts as a buffer. By not revealing your real email, you prevent your primary inbox from being flooded with phishing attempts, but you should still be cautious with links inside the temp inbox.
How can I check who sold my email?
Since you use a unique address for a specific signup, if you receive spam from an unknown source on that specific inbox, you know exactly which service leaked your data.
Are attachments supported and scanned?
Attachments are automatically removed from incoming emails for security reasons to prevent malware distribution.
Can someone else generate my address and steal my mail?
No. Your address is generated from a UUID-based hash. While your inbox is active, it is technically impossible for someone else to receive the same address. Only after your address expires could it theoretically be reused, and even then the probability that a newly generated inbox would match an address you previously had is approximately 0.0000027% per 1 million inboxes.
Is this safer than Gmail 'plus-addressing'?
Yes. Gmail plus-addressing ([email protected]) still reveals your main identity. Our service provides complete anonymity with no link to your real identity.

Power Users & Features

Do you offer a 'catch-all' for custom domains?
We are currently working on this feature for premium users.
Can I recover a mailbox if I closed the tab?
Yes. As long as the inbox hasn't expired, you can regain access (via local storage) even after a browser restart. However, if you explicitly clicked 'Delete', it is gone.
Is there an API for developers?
Not at this moment. We prioritize the web interface for individual privacy.
Can I choose my own username (before the @)?
We are working on this capability. Currently, addresses are randomly generated for maximum privacy.
Does the inbox support UTF-8 and special characters?
Yes, we fully support UTF-8 encoding, including Polish characters and emojis.

Troubleshooting

Why hasn't my verification email arrived?
Delays happen. Sometimes the sender queues emails. If it never arrives, the sender may be blocking our specific domain. Please try generating a new inbox.
How do I reset my password here?
We do not have user accounts or passwords. You access your inbox instantly upon generation. Once your browser session data is cleared, access is lost.
What if a site requires SMS verification?
We strictly handle email. For SMS, you will need to find a dedicated 'Temporary SMS' service (we do not endorse specific ones).
What is the best alternative to 10 Minute Mail?
tempinbox.cloud (You are here!). We offer modern encryption and longer retention than standard 10-minute services.