Temporary inboxes
Addresses and emails are processed only to provide inbox functionality and enter the deletion process when the inbox expires.
Updated September 5, 2026
Privacy Policy
This policy explains what data FoxFwd processes when providing temporary inboxes, long-term aliases, and account features, why we process it, how long we keep it, and how you can make a request.
Long-term routing
Login email addresses, alias settings, and delivery records support ongoing forwarding and account management.
Security by design
Verification codes and one-time codes confirm control without requiring a traditional password profile.
Request your data
Contact support@foxfwd.com to access, correct, or delete information related to your account.
1. Scope
This policy applies to the temporary email, long-term alias, email forwarding, archive browsing, and account security features provided at foxfwd.com. It also applies to privacy or technical requests you send to our support address.
Target websites, email senders, and the real email provider you choose process data under their own policies. FoxFwd cannot control these independent services. Before clicking an external link in an email, review the privacy information of the relevant website.
2. Data we process
When you use a temporary email, we process the random address, mailbox token, expiry time, sender, recipient, subject, body, attachments, and arrival time. Only information needed to display the inbox, download attachments, and perform actions such as deletion enters the service workflow.
When you use long-term features, we also process your login email, verification results, alias prefix, enabled status, delivery results, and 2FA configuration status. Authenticator secrets are stored only to enable and verify the second factor, not for analytics or marketing.
3. Automatically generated technical logs
To keep the service available and prevent abuse, servers may record request times, IP addresses, browser types, API paths, status codes, and brief error summaries. Technical logs help us detect attacks, troubleshoot delivery failures, and apply reasonable rate limits.
We do not build advertising profiles from these logs or sell browsing activity. Our infrastructure may automatically aggregate traffic data that does not directly identify individuals, and the page source does not include manually added third-party marketing trackers.
4. Purposes and legal bases
Core data is used to provide services you actively request, such as creating addresses, displaying emails, forwarding incoming messages, verifying logins, and protecting accounts. Security logs are processed based on legitimate needs to maintain service stability, prevent fraud, and limit automated abuse.
When the law requires us to retain or disclose specific records, we comply within the applicable scope. We do not use email content for targeted advertising except as needed to provide features, protect our systems, or meet lawful requirements.
5. Email content and attachments
Email bodies may contain personal information supplied by senders or third parties. Do not use a temporary email to receive medical, financial, government identity, or long-term account recovery materials. Anyone who knows the temporary address and obtains its access token may be able to view messages during the valid period.
Attachments are provided for download as originally sent. FoxFwd does not guarantee their safety or authenticity. Before opening an attachment, verify the sender and scan it with your device’s security tools; receiving a message does not mean we endorse its contents.
6. Browser storage
Browser storage saves the current temporary email token and login token so an active session can be restored after a page refresh. Session storage may also record whether demo emails have been read; this information generally remains in the current browser.
You can remove local information by changing the address, logging out, or clearing site data. After clearing it, an old temporary inbox may not be accessible again if you have no other recovery credentials.
7. Retention periods
Each type of data is kept only as long as needed for its purpose. After a temporary inbox expires, it enters the cleanup process. Delivery records for long-term routes display up to the most recent 30 days, while security logs rotate over a limited period needed for troubleshooting and abuse prevention.
Backup or disaster-recovery copies may be deleted later within a short rotation window, but they will not be restored for new business purposes. Records subject to a legal preservation hold enter the deletion process after the obligation ends.
| Data category | Primary purpose | Typical period | User action |
|---|---|---|---|
| Temporary inboxes and incoming mail | Receive and read online | Address validity period plus necessary cleanup window | Delete individual messages, change the address, or destroy the inbox |
| Long-term delivery records | Review forwarding results | Up to 30 days | Delete individual records |
| Aliases and login email | Manage long-term routing | While the account is in use | Delete aliases and request deletion of account data |
| Security technical logs | Troubleshooting, abuse prevention, and rate limiting | Limited rotation period | Contact support to make an inquiry |
8. Service providers and international processing
We may use hosting, database, network transmission, and email delivery infrastructure to operate the service. These providers may process data only as needed to deliver the agreed technical services and are subject to contracts or applicable law.
Infrastructure may be located outside your region, where data protection rules may differ. We take reasonable contractual and security measures required by applicable law to reduce the risks of international processing.
9. Disclosures and legal requests
We do not sell personal information or email content. We disclose relevant data only as necessary to operate the service, handle security incidents, enforce our terms, complete a corporate reorganization, or respond to legally valid requests.
We review government and law-enforcement requests we receive and, where legally permitted, limit requests that are overly broad. If we may lawfully notify affected users, we will do so through available contact channels.
10. Information security
We use access controls, token authentication, transmission protection, rate limiting, and least-privilege access to reduce unauthorized access. Long-term accounts can enable authenticator codes to add a second confirmation beyond code-based login.
No online service can promise absolute security. If you notice suspicious access, pause the relevant alias, end the session, and contact support promptly. Avoid sending new sensitive materials through ordinary email.
11. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing, or obtain a portable copy. When submitting a request, use the email address associated with your account so we can reasonably verify control.
We will respond within the applicable period and may request additional verification to protect other people’s data. If a record must legally be retained, we will explain what cannot be deleted immediately and why.
12. Children
This service is not designed for children below the age specified by applicable law, and we do not knowingly collect children’s information. If a guardian believes a minor has submitted personal information to the service, they may contact us to request an investigation and deletion.
Temporary email must not be used to bypass a target website’s age limits or parental-consent requirements. Users remain responsible for following the eligibility rules of the target service.
13. Policy changes
We may update this policy when features, infrastructure, or legal requirements change. We will update the date on this page for material changes and, where reasonable, provide additional notice.
Continuing to use the updated service means you have seen the current version, but it does not reduce rights granted to you by law. We recommend reviewing this page periodically before using long-term aliases.
14. Contact
Send privacy requests, data security reports, or questions about this policy to support@foxfwd.com. Please say whether your request concerns a temporary inbox or a long-term account, but do not include verification codes, authenticator secrets, or unnecessary email content.
We will first confirm the scope of your request and provide next steps. For account data, we may ask you to verify control once through your login email.