A LITTLE CLARITY
Temporary mail.
Clear expectations.
Inbini gives each inbox its own address, secret access key and expiry time. Claim an inbox before it expires to keep it until you delete it. The website and developer tools are free.
What works today
Create a private sandbox inbox, deliver a clearly marked sample message, read it, copy a verification code and delete it. The API and downloadable JavaScript/TypeScript and Python SDKs use the same backend.
Addresses ending in .test are intentionally non-deliverable. A receiving domain and mail routing must be connected before live reception is enabled.
Your domains and workspace
Custom domains are private to your workspace. Keep a backup of its private key to restore access on another device; there is no email-based account recovery. Anyone with that key can manage your domains and delete their inboxes. Each inbox still has a separate key for reading messages.
Domain setup requires a unique TXT record, Cloudflare Email Routing and a successful receiver test. Removing a domain deletes its inboxes and messages from this workspace. Remove its TXT record and receiver configuration in Cloudflare separately.
Who can read an inbox?
An address or inbox ID alone does not grant access. API requests need the inbox’s secret token. The website keeps its token in an HttpOnly, same-site cookie; the database stores a hash of that token.
Anyone with the secret token or recovery key can read and delete the inbox while it exists. This is access control, not end-to-end encryption. The service processes and stores message content to deliver it to you.
Keep an address for later
Choose Claim inbox before its expiry, then save the secret recovery key in your password manager. A claimed inbox has no expiry: its address, sender details and subject lines stay until you delete them. Message bodies are deleted seven days after receipt. It keeps receiving mail while you are away. Use Open claimed inbox and that key on any device to return to the same address.
Choosing New address keeps a claimed inbox. Delete inbox permanently removes it and invalidates its recovery key. Removing the receiving domain also deletes its inboxes, including claimed ones. If you lose both your key and browser access, we cannot restore access from the email address alone.
What happens when time runs out?
Unclaimed inboxes stop working at their expiry time. Expired inboxes cannot be read or claimed. You can delete an active inbox and its message contents at any time. The operational receipt log and its seven-day admin body copies described below are kept separately.
Bodies become inaccessible seven days after receipt, including in claimed inboxes. Physical removal runs with the scheduled cleanup job, normally every minute. Clearing browser cookies loses the browser session, but does not itself delete stored messages. A claimed inbox can be reopened with its saved recovery key.
Operational mail activity
Service administrators can view receipt times, sender and recipient addresses, subject lines, receiving domains and whether a message is a sandbox sample. This metadata is retained permanently to monitor usage and mail activity, including after a temporary inbox or message is deleted. Scheduled cleanup does not delete receipt metadata.
Administrators can also read plain-text message bodies for seven days after receipt. This separate copy survives early message, inbox or domain deletion, and is automatically deleted after the seven-day period. Attachments and inbox access keys are not included in the admin activity log. Subject lines can contain personal information; administrators can see them. Statistics count accepted deliveries once and exclude connection tests. Inbini does not send email.
Messages stay simple
The preview displays plain text. It does not execute scripts, render email HTML, load tracking pixels or support attachments. Links are opened only when you choose to follow them.
Use temporary inboxes for tests and short-lived tasks. Use a permanent email address for important accounts, recovery, private documents or long-term communication.
Reporting abuse
Use our abuse reporting form to report misuse of a receiving domain or address. Reports include your contact email, the reported domain or address, and the information you provide. They are visible only to Inbini administrators and remain stored until an administrator deletes them, including after the inbox or domain is removed.
The form uses self-hosted ALTCHA spam protection and request limits. No external captcha account or captcha verification service receives your report. Submitting a report does not automatically suspend a domain or address.
Free, with an expiry you choose
There are no paid features or fixed quotas for inbox creation, requests per inbox or message count. Choose a preset or a custom duration in seconds, minutes, hours or days. Unclaimed inboxes expire; the default lifetime is one hour. Claimed inboxes remain until deletion.
The preview has no advertising or third-party analytics code. Hosting infrastructure may process technical request information; this page does not make a zero-logging claim. Inbini is receive-only and does not offer outgoing email.