Updated 12 October 2026

Accounts and mail

If you sign in, QuickInbox stores the email address, name, and provider identifier supplied by Google or GitHub. It stores account sessions and hashed API keys to authorize access. The service stores mailbox addresses, incoming message senders, subjects, plain-text and sanitized HTML bodies, and supported attachments so you can read your mail.

Retention

Account mailboxes stay open until you close them. Closing an address permanently deletes its messages and attachments and stops new delivery; the address remains in your account history and can be reopened empty. Anonymous messages are removed after the address expires through periodic cleanup. Anonymous address records are eligible for removal after expiry.

Each mailbox has a 25 MiB storage limit. A delivery that would exceed the limit is rejected; existing messages are preserved. Save any mail you need before closing an address. Closing and reopening an account address starts it with an empty inbox and permanently removes its previous messages and attachments.

Browser extension

The extension stores your API key, account email, and selected mailbox in local extension storage. It does not sync the key through browser sync. The key is sent only to https://quickinbox.uk to authenticate your API requests. Mailbox lists and recent message summaries are cached in browser-session storage to make switching addresses faster. This cache is cleared when the browser session ends, you disconnect, or the server reports that the API key is no longer valid. Disconnecting also removes the local key, account email, and selected mailbox; you can revoke the key on the API page.

When you choose a Fill action, the extension examines input-field metadata on the active page and writes the selected address or code into a matching field. It does not transmit the page URL, field metadata, browsing history, or what you type to QuickInbox or an AI service. It never submits a form. Background checks refresh your open QuickInbox addresses and unread counts. Inbox lists are fetched when selected, and refreshed while the popup is visible. Message bodies and attachments are retrieved when you open a message.

Infrastructure and abuse prevention

Cloudflare routes incoming email and Railway hosts the application and PostgreSQL database. Requests necessarily expose network information to those providers. QuickInbox uses keyed hashes of client IP addresses for quotas and abuse controls. Anonymous website actions use Google reCAPTCHA, and sign-in uses the chosen Google or GitHub provider. Those services process data under their own policies.

Email images and links

Inline images included in the email can be displayed without contacting another website. External images are hidden by default. Choosing Load images contacts the image hosts, which may learn your IP address and that the image was requested. Opening an email link takes you to the linked website.

No advertising or sale of data

QuickInbox and its extension do not sell message contents or browsing data. The extension includes no advertising, analytics SDK, or remotely loaded executable code.

The extension uses data only to provide its stated temporary-email features. Its use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is not used for advertising, creditworthiness, or lending.

Questions or data requests

Contact the operator at support@quickinbox.uk. Include the account or mailbox address involved; never send a password or API key.