What We Collect
Pinbox collects only the minimum information needed to operate the service:
- Account credentials — Your username and a securely hashed password (we never store plaintext passwords).
- Usage counters — How many temporary emails you've generated and how many OTPs you've retrieved. This is used only in aggregate for service improvement.
- Session tokens — Short-lived JWT tokens stored client-side to keep you logged in.
What We Do NOT Collect
We do not store the contents of emails that pass through Pinbox. Messages are fetched on-demand and never persisted to our database. Your inbox is ephemeral by design.
- No email body content is stored in our database.
- No IP address logging for regular usage.
- No selling, sharing, or renting of your data to third parties.
- No advertising tracking or third-party analytics SDKs.
Temporary Email Addresses
Temporary email addresses you generate are associated with your session for the duration of your active window. Once you destroy a session or generate a new address, the old address becomes unreachable.
Pinbox does not archive, index, or make searchable any email addresses generated by users.
Data Security
All connections to Pinbox are encrypted via HTTPS/TLS. Passwords are hashed using bcrypt before storage. JWT tokens are signed and have limited expiry windows.
Your Rights
You may delete your account at any time by contacting support. Upon deletion, all associated usage data is permanently removed from our systems within 30 days.
Contact
Questions about this policy? Reach out via support@aiplex.app.