Privacy policy
Last updated 7 October 2026
VoyageBox gives you temporary email addresses so you can keep your real inbox private. This page explains, in plain words, what we store, how long we keep it and what your rights are.
Who runs VoyageBox
VoyageBox is run by a private individual in Finland, who is responsible for your data (the “data controller”). You can reach us at privacy@voyagebox.space.
What we store
- Your addresses. The random addresses you create, when they were made, when they expire and any nickname you give them.
- Mail sent to your addresses. The sender, subject, text and formatting of each email, when it arrived and whether you have opened it. We do not store attachments.
- A guest session. When you visit, your browser gets an anonymous session so only you can see your inbox. It is stored in your browser and is not linked to your name or real email.
- Your email address, if you create an account. Only needed if you want to save addresses. We use it to send you sign-in links and nothing else.
- Your light/dark setting. Stored only in your own browser.
We do not use advertising, tracking cookies or analytics, and we never sell or share your data for marketing.
How long we keep it
- Temporary addresses and their mail are deleted 24 hours after the address is created. They stop being visible the moment they expire, and are permanently removed within about 10 minutes after that.
- Saved addresses keep their mail until you delete the email or the address. Each address keeps its latest 200 emails.
- When you delete an address, all its mail is deleted right away. We keep only the address text itself, without any mail, so that it is never given to anyone else.
- Your account is kept until you ask us to delete it.
Who can see your mail
Only you: your inbox can only be opened from your own browser session or account. The person running VoyageBox has technical access to the database and will only look at stored mail when needed to investigate abuse reports, fix a problem you reported, or when required by law.
Temporary inboxes are not meant for sensitive information. Please don’t use VoyageBox for banking, health or other important accounts.
Services we use
These companies process data for us so the site can run:
- Supabase: stores addresses, mail and accounts, in a data centre in Stockholm, Sweden.
- Cloudflare: receives incoming email for our domain and passes it to our database.
- Vercel: hosts the website.
Like any website host, these services keep short-lived technical logs, such as IP addresses, to keep the service secure and working.
Why we are allowed to process this
We process your data to provide the service you asked for, and for our legitimate interest in keeping VoyageBox secure and free from abuse.
Your rights
You can ask to see, correct or delete the data we hold about you, or object to how we use it. Email privacy@voyagebox.space. You can also delete addresses and mail yourself at any time. If you’re unhappy with how we handle your data, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Changes
If we change this policy, we’ll update the date at the top of this page.