Addresses, expiry times, and email content are used to display the current inbox and enter the deletion process when the service period ends.
Privacy Policy
Data boundaries should beclear and actionable
This policy explains how OxRelay handles data when providing temporary email and forwarding services. Last updated: September 11, 2026.
Login email addresses, alias settings, and delivery records are used to carry out requested forwarding and security management.
We do not sell personal information or read email content to build advertising profiles.
You can delete emails, disable aliases, turn off two-step verification, or contact us about data requests.
Retention and processing boundaries
| Data category | Purpose | Retention limit |
|---|---|---|
| Temporary addresses and emails | Create an inbox, receive emails, and display them | For the address lifetime and any necessary secure-deletion period |
| Login emails and verification-code events | Passwordless authentication, abuse prevention, and account notifications | For the life of the account and any necessary security-log period |
| Aliases and delivery records | Forwarding, troubleshooting, and user auditing | Delivery archives for up to 30 days; settings until deleted |
| Support communications | Respond to requests, verify issues, and prevent duplicate handling | Until the issue is resolved and for a reasonable dispute-handling period |
Information we collect
When you use a temporary inbox, we process the created address, email metadata, message content, and necessary technical logs. With long-term forwarding, we also process your login email, alias status, delivery results, and security information you choose to configure.
Your browser may save tokens and the current email address to keep you signed in or preserve your inbox session. Do not keep sessions on public devices; sign out and clear browser data before leaving.
Processing purposes and legal bases
We process the data necessary to provide the inbox, forwarding, and account-management services you request. Abuse prevention, troubleshooting, and service security are based on our legitimate interest in protecting users and the platform, and are limited to what is necessary.
Where required by law or where processing relies on consent, we will provide notice and choices as required. We do not use email content to build advertising-interest profiles.
Sharing and international processing
Infrastructure, security, and email-delivery providers may process data within the scope of their assigned services. We require them to process data only on our instructions and to apply confidentiality and security measures proportionate to the risks.
If processing crosses jurisdictions, we use applicable contractual or legal safeguards. Requests from legal authorities undergo validity review, and we respond only to the extent required by law.
Security and deletion
We use access controls, data-in-transit protection, log reviews, and least-privilege measures, but no internet service can guarantee absolute security. Do not use a temporary email for high-value account recovery or highly sensitive information.
Expiration, user deletion, or account closure triggers the relevant deletion process; residual data in backups is removed during the established rotation cycle. Data that must be retained by law is isolated and its use restricted.
Your rights
Depending on the laws where you live, you may have the right to access, correct, delete, restrict, object to, or port your data. We process requests after verifying the requester’s relationship to the relevant account, helping prevent disclosure to others.
To submit a request or complaint, email support@oxrelay.com. You may also contact a data protection authority with jurisdiction.
Children and policy changes
The service is not intended for children who are legally unable to independently consent to data processing. If a guardian discovers that a child has improperly provided information, they can contact us to request its deletion.
Material changes will be reflected in the updated date on this page, with appropriate notice provided. Review the latest boundaries before continuing to use the service; if you disagree, stop using it and delete the relevant settings.