Privacy

Mailbox information

To provide an inbox, Blackinbox processes its email address, authentication data, and messages delivered to it. Mailbox passwords are stored as password hashes, not as readable passwords. Messages are stored on the service's server and are automatically removed after seven days.

Mailbox addresses are managed by the service administrator and may remain active until removed. The administrator can access mailbox-management functions and may be able to access messages as needed to operate or support the service.

Message confidentiality

Messages are not end-to-end encrypted. They must be readable by the mail service to display them in your inbox, and people with sufficient server or administrator access may be able to access them. Do not use Blackinbox for passwords, financial details, health information, or other sensitive communications.

Contact submissions

If you use the contact form, the name and reply address you choose to provide, along with your subject and message, are stored for up to 90 days. The administrator can view or delete them sooner. Submissions are not automatically emailed, and no reply is guaranteed. Do not include passwords, verification codes, or sensitive personal information.

Browser storage and technical logs

Blackinbox uses a secure session cookie and browser storage to keep the mailbox name available on the device for inbox refresh. Your mailbox password is not saved in browser storage. Hosting and security logs may record technical request information, such as IP address and time, according to server operations and log-retention settings.

Security and service providers

Data is processed on the infrastructure used to operate Blackinbox. Reasonable safeguards are used, but no internet service can guarantee absolute security. In particular, a person who gains privileged control of the server may be able to access data available to the running mail service.

Questions or requests

For privacy questions or a request concerning a contact-form submission, use the Contact page. Requests about a mailbox may require proof that you control that mailbox.