Temporary inboxes, forwarding accounts, security logs, and support mail are kept apart. We do not stitch them into an advertising profile.
Message bodies are not sold to ad networks, and browsing trails are not handed to data brokers.
To access, correct, or delete forwarding data, write from that account’s login mailbox so we can verify control.
Session and language preferences stay on your device to resume work, not for cross-site ads.
1. Controller, scope, and roles
This policy covers the public pages, disposable inbox, forwarding console, and support mail on resendbox.com. The controller is the operator of ResendBox, reached at support@resendbox.com. Senders, sites where you register, and your destination mailbox provider have their own rules; we cannot speak for them.
A disposable address is a short-lived tool, not an identity with password recovery. A forwarding alias delivers mail to a mailbox you control and keeps that mailbox hidden from public forms. Both are processed only for the purposes and lifetimes below.
2. Information we process
Disposable inbox
To create an address, show incoming mail, and block automated abuse, we process the random address, mailbox token, expiry, envelope fields, body, attachment names and sizes, and arrival time. Do not send identity documents, financial or medical files, or primary-account recovery codes to a disposable address.
Forwarding accounts and aliases
When you use permanent forwarding we process the destination mailbox, one-time login results, session data, aliases, pause/resume settings, a protected representation of two-factor secrets, and a delivery archive of at most 30 days. Processing stays within routing, archive display, and fault diagnosis.
Technical and support data
Servers may record request time, browser type, coarse network data, error codes, and security events. Mail to support@resendbox.com is processed to resolve the request. Do not attach passwords, full one-time codes, or identity scans.
| Object | Default lifetime | Exceptions |
|---|---|---|
| Disposable address and mail | Countdown window | Abuse investigations may keep related logs briefly |
| Aliases and account | While the account exists | Copies already in your destination mailbox are outside our ledger |
| Forwarding archive | ≤30 days | Legal holds or open disputes |
| Security logs | Limited operations window | Valid legal process |
| Support correspondence | Limited retention after resolution | Fraud prevention or open complaints |
3. Purposes, grounds, and what we do not do
We process data to create addresses, display mail, forward messages, verify login, keep sessions, limit abuse, diagnose delivery, answer support, and meet legal duties. Necessary processing rests on performing your request, our legitimate interest in keeping the service safe, or applicable law.
We do not sell personal data, use message bodies for advertising profiles, or treat disposable tokens as cross-site advertising identifiers. Diagnostic guides explain common symptoms; they do not replace the sender’s or mailbox provider’s support.
4. Sharing, processors, and transfers
Hosting, network, delivery, and security vendors see only what they need under contract. We may disclose the minimum required fields when law or user safety demands it. Forwarding necessarily sends content to the destination provider you named.
Infrastructure may sit in more than one country. Cross-border transfers use applicable contracts and safeguards. If your jurisdiction needs extra protection, include that in the support request.
5. Cookies, local storage, and automation
The site uses local storage for disposable tokens, read state, language preference, and forwarding login tokens so a refresh can resume work. You can clear these in the browser. We do not require third-party advertising cookies.
We do not make automated credit, employment, or insurance decisions. Anti-abuse rate limits may block obvious bots; false positives can be reviewed on request.
6. Security boundaries
Access control, transport protection, lifetime limits, and least privilege are defaults. Internet mail is not a sealed vault: senders, relays, and destination boxes may keep copies. Pixels and outbound links can report opens to third parties.
Do not use a public or short-lived address for banking, medical, government, work-primary, or irreplaceable credentials. If something looks wrong, stop using the address and contact us.
7. Your choices and rights
You may replace or abandon a disposable address, pause or delete aliases, and clear local storage. Where law applies to a forwarding account you may request access, correction, deletion, restriction, or a portable copy. Write from the login mailbox and describe the scope. We may verify ownership first.
Fraud prevention, legal duties, or open disputes can delay deletion. We cannot disclose content for a disposable token whose control you cannot prove.
8. Children, changes, and contact
The service is not directed at children below the local digital-consent age. Related addresses or accounts will be closed if we learn otherwise. Material changes update the date on this page; continued use accepts the revised text.
Privacy questions go to support@resendbox.com. Leave out unnecessary sensitive attachments.