Last updated: 23 September 2026
Boxo is built to protect your privacy. Here is exactly what happens to the data.
Emails sent to a Boxo address are stored temporarily so they can be shown to you. They disappear from the inbox 3 hours after arrival and are permanently erased within 24 hours. In the meantime, only the site operator can view them, solely to detect abuse and keep the service secure. We also keep the senders' domain and the result of their authenticity checks (SPF, DKIM, DMARC) for 30 days, without any content. Messages are never indexed, sold or shared.
No sign-up is required : we know neither your name nor your real address. Temporary addresses are generated at random.
We only measure anonymous traffic statistics — page viewed, time spent on it, device type, language and country. None of this uses a cookie or a third-party service : your IP address is only used to derive the country, then turned into a one-way daily fingerprint that changes every night — it is never stored. If your browser sends the “Do Not Track” or GPC signal, you are not counted at all.
Boxo is a receive-only service, meant to keep spam away. It must not be used for illegal activity, nor for sensitive accounts (banking, government).
The site is funded by advertising (Google AdSense, for example). These partners may use cookies. Manage personalised advertising in your Google ad settings. A consent banner lets you accept or refuse non-essential cookies (GDPR).
If you write to us, we keep your name, email address, subject and message, solely to reply to you. Only the site operator can read them; they are never sold, shared or used for marketing. Only the 500 most recent messages are kept, and older ones are deleted automatically. To prevent abuse, the number of messages per connection is limited using a non-reversible fingerprint of the IP address.
For any question, write to us via the About & contact page.