Short-term inboxes
Disposable inboxes last 3 hours by default, up to 24 hours total.
Effective August 25, 2026. This policy explains how MaskSend handles information when providing disposable inboxes and email forwarding services.
Disposable inboxes last 3 hours by default, up to 24 hours total.
Email records in the dashboard are kept for 30 days for review and retrying delivery.
You can pause, resume, or delete aliases and manage archived messages.
Send privacy requests to support@masksend.com.
| Information | Purpose | Typical retention | Your controls |
|---|---|---|---|
| Temporary addresses and emails | Display the current inbox | 3 hours by default, up to 24 hours | Change address, expiration, delete individual messages |
| Login email and aliases | Authenticate and perform forwarding | While the account is in use | Pause or delete aliases |
| Forwarded email archives | View status, content, and retry delivery | 30 days | Manage from the dashboard |
| Security logs | Abuse prevention, diagnostics, and rate limiting | As long as needed for the stated purpose | Submit a request where legally permitted |
This policy applies to the disposable inboxes, forwarding aliases, authentication, and support services provided by masksend.com. When third-party websites send you email, their own data practices are governed by their policies.
When you submit a MaskSend address to a third party, you also establish an information relationship with that party. Review its privacy policy and account-recovery requirements before submitting the address.
The temporary service processes generated addresses, access tokens, expiration times, and incoming email content. The forwarding service also processes login email addresses, aliases, forwarding status, archived content, and attachment metadata.
To keep the service secure, we may process IP addresses, request times, browser information, errors, and rate signals. We use this information only to operate, secure, and troubleshoot the service.
Some information comes directly from you, such as your login email, alias prefix, and support requests. Email content comes from third-party senders who send messages to MaskSend addresses.
Operational signals are generated automatically when you access or call the service. We do not require your name or a password to use a disposable inbox.
We process information to create addresses, display email, verify logins, forward messages, maintain archives, and respond to support requests. Security signals help limit automated abuse, investigate failures, and protect other users.
We do not claim that a temporary address makes you completely anonymous. Websites you use may still identify you through payment details, devices, networks, or account information.
Where required by applicable law, core processing is based on fulfilling your requests and providing the service. Security, fraud prevention, and reliability improvements may be based on our legitimate interests.
If a type of processing requires consent, we will provide a clear choice before processing begins. Withdrawing consent does not affect processing lawfully completed before withdrawal.
New disposable addresses are valid for 3 hours by default. You may extend them, but their total lifetime cannot exceed 24 hours. After expiration or a voluntary address change, the old address should not be considered a recoverable access point.
Disposable email is not intended for long-term account recovery, and attachments are not retained. Complete any necessary actions before the address expires, and avoid receiving irreplaceable content.
Forwarding aliases remain active while your account is in use, until you pause or delete them. Archived email is generally retained for 30 days so you can view its content, forwarding status, and retry failed deliveries.
Large attachments may be forwarded with an email but are not added to the archive. Before deleting an alias, update third-party accounts that depend on it to avoid losing notifications or recovery access.
We share information with service providers only when necessary to provide hosting, delivery, security, or support, and require them to protect data according to our instructions. Forwarding inherently sends incoming email to the real email address you specify.
We may also disclose necessary information to comply with legal obligations, protect users, or investigate abuse. Selling personal information is not our business model.
Protected interfaces require a valid authentication token. Two-step verification can add a second factor to forwarding accounts. Actual HTML email is rendered in a restricted iframe to reduce direct interaction between scripts and the site interface.
No internet service can guarantee absolute security. Protect your email verification codes, authenticator keys, and device access, and report unusual activity promptly.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export relevant information. We process requests after verifying the requester’s relationship to the account.
If the law allows us to retain certain security or compliance records, we will explain why and the expected retention period. Making a request does not affect your right to use a public disposable inbox.
The service is not intended for children below the local digital age of consent and is not designed to collect children’s sensitive information. A parent or guardian who believes a minor provided information improperly may contact support.
After verification, we will take appropriate steps to delete or restrict the information. Schools and organizations must complete their own required authorization and risk assessment before using the service.
Service providers and email routing may be located in different jurisdictions. We use reasonable safeguards as required by applicable law. Material policy changes will update the effective date on this page, with additional notice where necessary.
Send questions, complaints, or rights requests to support@masksend.com. To protect your privacy, do not send passwords, verification codes, or complete sensitive email content in ordinary support messages.