What We Collect
Pinbox collects only the minimum information needed to operate the service:
- Account credentials — Your username and a securely hashed password (we never store plaintext passwords).
- Usage counters — How many temporary emails you've generated and how many OTPs you've retrieved. This is used only in aggregate for service improvement.
- Login sessions — Secure session information stored in your browser to keep you logged in. These expire automatically for your protection.
What We Do NOT Collect
We do not store the contents of emails that pass through Pinbox. Messages are fetched on-demand and never persisted to our database. Your inbox is ephemeral by design.
- No email body content is stored in our database.
- No IP address logging for regular usage.
- No selling, sharing, or renting of your data to third parties.
- No advertising tracking or third-party analytics SDKs.
Temporary Email Addresses
Temporary email addresses you generate are associated with your session for the duration of your active window. Once you destroy a session or generate a new address, the old address becomes unreachable.
Pinbox does not archive, index, or make searchable any email addresses generated by users.
Data Security
We take your security seriously. Here's how we protect your data:
- Encrypted connections All communication between your device and Pinbox is encrypted, so nobody can intercept your data
- Protected passwords Your password is never stored in readable form. We use advanced encryption that makes it impossible for anyone (including us) to see your actual password
- Secure login sessions When you log in, we create a secure session that automatically expires after a period of inactivity to protect your account
- Server-side verification When you sign in with Google, we verify your identity directly with Google's servers to prevent impersonation
- Protected sensitive data Personal information like your phone number is encrypted before being stored in our database
We regularly update our security measures to protect against new threats and follow industry best practices.
Your Rights
You may delete your account at any time by contacting support. Upon deletion, all associated usage data is permanently removed from our systems within 30 days.
Contact
Questions about this policy? Reach out via support@aiplex.app.