Disposable email: frequently asked questions

So that your inboxes are yours alone: they are tied to your account, and other users cannot see them. It takes one click with Google or GitHub; with an email, you confirm it once, which also keeps automated sign-ups out.

You, signed in to your account. No other user can open your inboxes, or even learn that they exist. Mail is shown in an isolated frame, without scripts, and remote images are blocked by default.

No. The service only receives: no message ever leaves it.

Up to 5 active addresses at a time, and 20 new ones per hour. Each address receives mail for 24 hours from its creation; you can extend it 24 hours at a time, up to 7 days.

Yes: nothing obliges you to give a site your main address. What is forbidden is using it to commit fraud, impersonate someone or get around a ban (see the terms). Some sites forbid disposable addresses in their own terms: respect them.

nerdbox is published by Robin Meyssonnier, a sole trader in France (legal notice). It is free and ad-free, and sells no data: no advertising tracker and no audience measurement (cookies).

Anyone who knows a YOPmail inbox’s name can read it (YOPmail’s FAQ, read on 6 October 2026). Firefox Relay forwards to your real inbox, which is better for a lasting account. A “+” address is still your real address, which the site sees and can strip. nerdbox is a separate, private inbox that fades away. The full comparison.

Some sites keep lists of disposable domains and refuse them. We cannot change that: for that site, use another address, your real one if the account matters to you.

Yes, read only: from the address’s menu, make a link valid for an hour, a day, or until the address expires. Whoever has it can read the mail, never delete it nor see the name you gave the address. Up to 5 links per address, each revoked in one click.

Open nerdbox in your phone’s browser and install it (on iPhone: Share, then “Add to Home Screen”, iOS 16.4 or later). Then turn notifications on from your space: each device has its own setting, and can hide what the notifications say. Step by step.

It stays in your space while the address lives. When the address expires, it leaves your space with its mail, and its content is erased from our servers 1 hour later at most; its sender, subject and first lines may remain in the database backups, kept 30 days at most. You can also delete a mail or an address at any time. All that remains is the connection data the law requires us to keep for 1 year (which action, when, from which IP address), kept apart, without the content of any mail, for the authorities that request it only.

Not yet: nerdbox is open in a test phase. It may stop or change without notice, with no guarantee it is available. Your feedback is welcome through the contact page.

Yes: when you create an address, leave it random or type an alias of your choice. It ends with @nerdbox.rsvp.

Right-click an email field and choose “Fill with nerdbox”, or press Alt+Shift+N: a new address goes into the field, and the code shows on the page when it arrives. It touches a page only after one of these actions. All about the extension.

No. Signing in is handled by Auth0 (Okta), with an email and a password, or with your Google or GitHub account: nerdbox never sees your password.

Not by default: remote images, which can tell the sender that you opened the mail, are blocked until you choose to show them for that mail.

Yes, yourself, from your space: “My account”, then “Delete my account”. You type the email of your account, sign in again, and it is gone, here and at Auth0. You can also delete each address and each mail at any time.