Temporary addresses expire
Valid for 3 hours by default, with the option to extend. Once expired or deleted, an address cannot be restored as a long-term archive.
Updated October 15, 2026
This policy applies to temporary email and long-term alias forwarding on cloneinbox.com. We process information only as needed to provide the features you use; temporary addresses are not completely anonymous vaults.
Valid for 3 hours by default, with the option to extend. Once expired or deleted, an address cannot be restored as a long-term archive.
Your account email is used for login verification and forwarding. Using an alias publicly doesn't mean the service can operate without knowing the destination address.
Temporary email credentials and account sessions identify who can access your inbox. Don't share browser storage or login tokens.
Deleting records from this site won't remove copies already delivered to an external inbox. Delete those copies through the relevant email service.
In this policy, “we” refers to the operator of the CloneInbox website. We provide temporary inbox addresses to visitors and alias forwarding and related management features to users who verify their email address.
For privacy questions or to request access to or deletion of your data, email support@cloneinbox.com Include the feature and date range involved. Don't send verification codes, session tokens, or authenticator keys. We may ask you to verify that you control the account email address.
Temporary email requires us to process random addresses, access credentials, validity periods, and the sender, recipient, subject, and body of messages. Login and forwarding also require your real email address, links between aliases and accounts, verification results, delivery status, and security information needed to enable an authenticator.
We use this information to provide the inbox, forwarding, message display, attachment downloads, delivery retries, and account security features you request. Network requests may also generate IP addresses, timestamps, browser types, and error logs for troubleshooting, abuse prevention, and service protection. We don't promise that users cannot be identified.
Feature-specific expiration periods determine how long you can access content in the interface. Security logs and records we are legally required to keep may follow different retention periods. If we receive a lawful preservation request, deletion of relevant records may be delayed as required by law.
Don't use this service as your only backup. Deleting content, an address expiring, or losing browser credentials may make it inaccessible. We can't control emails already delivered to external recipients.
| Information category | How long the feature retains it | What you can do |
|---|---|---|
| Temporary address and incoming mail | 3 hours by default; extending the address changes its current expiration time | Delete an individual email or get a new address to destroy the old inbox |
| Forwarding records | Records from the past 30 days | Open and delete records in the management page |
| Account email and alias link | As long as needed to provide account and forwarding features | Delete the alias; contact support to make an account-related request |
| Browser access credentials | For as long as the session requires, or until you clear them | Log out or clear site data |
| Forwarded copies in external inboxes | Determined by the receiving email provider and the user | Manage them in that email account |
The site uses browser local storage to keep your account session and may use session storage to remember interface states, such as the email you're currently viewing. Temporary inboxes and logged-in accounts use separate credentials. Logging out of your account does not automatically delete a temporary inbox.
Disabling storage or clearing site data may log you out or remove access to your temporary inbox. The site may record basic usage statistics and error information to improve the service. An account-free experience doesn't mean no data is recorded; available controls depend on your browser and the deployment environment.
Delivering email involves infrastructure, email transmission services, and receiving email providers. These providers may access data only as needed to operate the service, troubleshoot issues, or meet legal obligations. We don't sell your email address or message content for advertising.
Remote images and external links in emails may be hosted by the sender or third parties. Viewing an image or opening a link may expose network information to them. This policy doesn't replace third parties' own policies; use caution with unfamiliar senders.
You can view aliases and recent messages in the management page, pause or delete aliases, and delete messages you no longer need. For requests involving account links, corrections to recipient details, or deletions you can't complete in the interface, contact support from your account email to help prevent accidental deletion of someone else's information.
Depending on the laws where you live, you may have the right to access, correct, or delete your data, restrict processing, or object to it. We'll verify the scope of your request and explain the outcome. If security, another person's rights, or legal obligations prevent us from fulfilling it in full, we'll explain why.
We reduce risks through access credentials, login verification, permission controls, and email content sanitization. No online service can guarantee zero risk. This service isn't suitable as your sole recovery channel for banking, healthcare, identity documents, work secrets, or critical accounts.
Protect your real email address and authenticator device. If you notice unusual activity, disable the relevant aliases and contact support immediately. Minors may use the service only where permitted by applicable law and with any required parental or guardian consent. If you believe we have improperly collected a minor's information, let us know so we can investigate.
We may update this policy when features, data processing practices, or legal requirements change, and update the date at the top of the page. Where reasonably practicable, we'll notify you of significant changes that affect your rights through a website notice or your account email.
We recommend checking this page regularly. If you disagree with new data practices, stop creating new addresses and delete existing content using the methods above. For the rules on using the service, also read the Terms of Service.