1. Information we process
Disposable inbox: The generated address, access token, creation and expiration times, and the sender, subject, body, and attachments delivered to that address. The token lets your current browser access the inbox—do not share it.
Forwarding alias: The real email address used for verification-code sign-in, the aliases you create, forwarding status, archived messages, sender reputation settings, and two-step verification configuration. The authenticator key is used only to verify the second factor.
Technical information: Request times, network addresses, basic browser information, API results, and error logs generated for security, troubleshooting, and rate limiting. Our hosting platform may automatically inject aggregated visit statistics; the page itself does not use custom tracking scripts.
2. Why we process data
We process the data needed to create and recover disposable email addresses, receive and display messages, forward alias mail to your chosen recipient, prevent abuse, enforce rate limits, diagnose service problems, and respond to support requests. We do not build user profiles to sell contact lists.
3. Retention and deletion
Disposable addresses operate for the period shown on the page and should not be treated as permanent storage. After expiration, manual destruction, or system cleanup, the address and its messages may not be recoverable. Forwarding users can delete individual archived messages, clear records, disable aliases, or delete them from the console. Security logs may be retained for a reasonable period to investigate abuse and protect our systems.
4. Forwarding and third parties
When you use a forwarding alias, messages must travel over the internet to the real email address you specify, so your email provider will process them under its own policies. External images and links in messages may also tell the sender that you accessed them; don’t load remote content until you have confirmed its source. We may use infrastructure providers for computing, storage, and email delivery, sharing only the information needed to provide the service.
5. Security and limitations
We use access tokens, verification codes, optional two-step verification, and rate limiting to reduce the risk of unauthorized access, but no online service can guarantee absolute security. Disposable email is not suitable for financial, medical, government, critical work systems, or accounts that must remain recoverable long term.
6. Your choices
You can destroy a disposable mailbox, delete messages, disable or delete aliases, manage sender reputation, and close your local session. To request access to, correction of, or deletion of data associated with a forwarding account, contact us from that account’s email address at support@nixmx.com. We may need to verify the requester’s identity.
7. Children and abuse
The service is not intended for children who cannot legally consent to data processing. You must not use NixMX for harassment, evading law enforcement, fraud, distributing malware, or accessing systems without authorization. We may restrict service and retain necessary evidence to protect users, comply with the law, or investigate serious abuse.
8. Policy changes and contact
We may update this policy when features, legal requirements, or infrastructure change, and we will show the version date at the top of the page. If you have questions about our privacy practices, contact us at support@nixmx.com.