Terms of Service

Choose an address with
its limits in mind

Temporary addresses are for short-term email, while long-term aliases are best assigned to individual websites. Neither should be your only place to keep important information, and neither changes your account arrangements with third-party websites.

Last updated and effective: · Applies to timedbox.com

These terms explain what to expect from Timedbox and what you’re responsible for. Read them before creating, copying, or assigning an address. If a restriction conflicts with your intended use, don’t use the address for that purpose. Nothing here limits rights that cannot be excluded under applicable law.

01 · Service scope

Timedbox offers two ways to receive email. The temporary inbox requires no sign-in; you access it on the website using temporary access credentials. Long-term forwarding aliases require you to verify access to a real email address, then messages are automatically forwarded to it under our service rules. Alias-management sessions and temporary inbox credentials are separate: signing out of alias management does not destroy a temporary inbox.

Temporary addresses and aliases are for receiving and forwarding email only. They cannot send email to arbitrary recipients or reply from that address. We can’t guarantee third-party websites will accept these addresses, and we are not affiliated with brands shown in any sample emails. Homepage examples are for illustrating the interface only; they do not represent real transactions, login alerts, or a promise of delivery.

If you only need a one-time verification, use the temporary inbox on the homepage. If you need to keep receiving order confirmations, notifications, or password reset emails, read the lifespan guide first, then decide whether a long-term alias is right for you.

02 · Timing and quota limits

The lifespan of a temporary address starts when it is created and is 3 hours initially. Each renewal request made before expiry adds 3 hours, up to a total of 24 hours from creation. Near that limit, rely on the result accepted by the API and the updated expiry time shown on the page. Renewals do not keep an address forever or reset its lifespan to a fresh 24 hours each time.

Selecting “Get a new address” creates a new 3-hour inbox and destroys the old one. Emails in the old inbox won’t be moved to the new one. Save anything you still need and update any registration forms you haven’t submitted. Don’t expect emails sent to the old address to arrive.

What each action changes — and what it doesn’t
Item or action Time and quota Important limits
Temporary inbox 3 hours initially; each renewal adds 3 hours; 24 hours maximum in total The address and emails are deleted on expiry, with no recycle bin. Getting a new address does not move old emails.
Long-term forwarding alias Up to 100 per account; the actual quota returned by the API applies Disabled aliases still count toward your quota. New messages to a disabled alias are discarded, and won’t be delivered if you re-enable it.
Forwarded email archive Records available for the last 30 days Not a permanent backup. Deleting an archive won’t remove copies already forwarded to your real inbox.
Browser recovery Only while the temporary inbox is active and you still have its original access credentials You may be able to reopen it in the same browser. Recovery is not guaranteed after switching devices or clearing data.

A long-term alias can remain in use until you disable or delete it, or the service is restricted as permitted by law and these terms. This is not a guarantee of permanent availability. Check the current quota and status shown in the alias management page. Don’t use multiple accounts or other methods to get around limits.

03 · Accounts and credentials

Temporary inbox credentials are the keys to viewing and managing that inbox. Don’t share them, hand them to others, or enter them on untrusted pages. Other users of a shared device may be able to access data in its browser. When you’re finished, make sure you’ve saved anything you need and, if appropriate, destroy the temporary inbox — simply closing the tab isn’t enough.

Managing long-term aliases requires verification through your real email address. Keep that address accessible, check its mail rules and spam folder, and protect your sign-in codes and sessions. If you lose access to your real email, you may no longer be able to manage your aliases. Knowing an alias address alone does not guarantee that we can restore access to alias management.

We recommend enabling two-step verification in the alias dashboard. Scan the QR code with an authenticator app such as Google Authenticator, Microsoft Authenticator, or 1Password, then enter the 6-digit code it generates to confirm. Never send your secret key, QR code, or one-time code to support or anyone claiming to be support. Two-step verification does not replace protecting access to your real email account.

04 · Permitted uses and prohibited activity

You are responsible for ensuring your use complies with applicable laws, third-party platform rules, and any permissions you have. Using an address that hides your real email does not remove your responsibilities when registering, making transactions, or testing software, and does not allow you to bypass another party’s restrictions.

The examples below are assessed based on the conduct itself. Appropriate use can help keep your real email private, but we may take measures such as rate limiting, suspending affected addresses, or restricting access if we detect abuse.

Permitted: authorized, ordinary email use

  • Registration and verification: Complete a standard registration, activation, or one-time verification on platforms that allow these types of addresses.
  • Development and testing: Test email templates, notification workflows, and email delivery in systems you own or are authorized to test.
  • Assigning aliases by site: Create separate aliases for shopping, travel bookings, forums, or subscriptions to help manage incoming email.
  • Privacy: Reduce exposure of your real email in forms, as long as this follows the other party’s rules.

Prohibited: abuse, deception, or unauthorized activity

  • Spam and abuse: Take part in bulk harassment, email bombing, malicious subscriptions, or help distribute harmful content.
  • Fraud and impersonation: Phish, impersonate others, take over accounts, or receive someone else’s verification emails without authorization.
  • Illegal activity: Use the service for unlawful transactions, to violate others’ rights, or for any other conduct that breaks applicable law.
  • Circumventing restrictions: Get around bans, registration limits, risk controls, or access restrictions, or attack, overload, or disrupt the service.

If your development or testing work requires a high volume of incoming email, contact support through the channel on this page and explain your use case. Don’t probe capacity by automatically creating inboxes at a high rate. If you find a suspicious email, don’t click its links or enter any verification code. Note the time, address, and what you observed, then contact support for help.

05 · Delivery and recovery limits

Third-party websites may block temporary email domains, or may fail to send messages because of their own risk controls, sending queues, or email system issues. Messages can be delayed or fail during transmission, filtering, or forwarding. Automatic inbox checks on the website do not mean the sender has successfully delivered a message. We can’t guarantee that every email will arrive or arrive within a particular timeframe.

If an email doesn’t arrive, first check the spelling of the address, its remaining lifespan, whether the alias is enabled, and the spam folder of your real email account. Then try again according to the sender’s instructions. Don’t request verification codes repeatedly in quick succession. A delayed code may have expired; follow the sender’s latest instructions.

A temporary address is not suitable as the only recovery method for bank, medical, identity, or long-term accounts. After expiry, changing the address, or destroying the inbox, emails in it cannot be recovered. You may be able to reopen a closed page in the same browser only if you still have the original credentials and the inbox is still active.

New messages to a disabled alias are discarded immediately. They are not queued for delivery if you re-enable it and won’t be forwarded later. Before disabling or deleting an alias used for an important account, change the contact email on the third-party website and complete its verification. A long-term alias should not be your only backup for important information either.

06 · Deletion, service changes, and support

Deleting an item here doesn’t delete every copy of an email

Deleting a forwarded email archive removes only the corresponding record on our service. It won’t recall copies already delivered to your real email or saved by other email systems. Deleting an alias does not close a third-party account, end a paid subscription, or cancel a transaction. You must do those things on the relevant website.

Expired or destroyed temporary inboxes cannot be recovered. Save anything you need before deleting, changing the address, or destroying an inbox. For more information about data processing, retention, and privacy requests, read our Privacy Policy.

Changes must have a reason and stay within limits

We may change API quotas, features, and access conditions, or suspend affected services, to maintain security, address abuse, comply with the law, or carry out necessary maintenance. We’ll make reasonable efforts to notify you, for example with an on-site notice, about foreseeable changes that materially affect normal use. Urgent security measures may require action without advance notice.

These terms do not guarantee uninterrupted service, permanent addresses, or ongoing compatibility with third-party systems, and do not exclude liability that cannot be excluded under applicable law. Updates to these terms will be dated on this page. Before continuing to use the service, review any changes to time limits, quotas, and deletion rules that affect you. If you don’t accept a change, stop the affected use and promptly move any accounts that need ongoing email to another address.

Questions? Tell us what happened

Include when the issue occurred, the relevant address, the steps you took, and any error message with sensitive details removed. Don’t send sign-in codes, temporary access tokens, two-step verification secrets, or complete sensitive emails. Support can help troubleshoot, but cannot recover a destroyed temporary inbox or manage third-party accounts for you.

support@timedbox.com