A few good questions about temporary email
Answers about inbox privacy, expiration, verification codes, attachments, and delivery.
Do I need to register?
No. An inbox is authorized by a random secret access token stored in your browser session. A security challenge may be required before creation.
Can someone open my inbox if they know the address?
The API requires the access token. The address alone is not authorization. Anyone with the token can access the inbox, so do not share it or put it into a URL.
Why hasn’t my email arrived?
Check the address and expiration time. Some senders delay mail, reject disposable addresses, or never send a message. Messages larger than 1 MiB, unsupported attachments, and inactive recipients are rejected. If the inbox service is disconnected, the interface shows an error rather than invented messages.
Are attachments safe?
Supported files are available only through an authorized download. They are not scanned for malware in Release 1. The service does not execute or automatically preview them. Download only from a sender you trust.
Can I recover an expired inbox?
No. The service does not offer recovery after expiration or permanent deletion. An active browser session may restore its existing inbox while the original token is still present.
Where are the advertisements?
Advertising infrastructure is included in Release 1. Approved advertisements may appear on public educational pages after consent. No advertising scripts load in private inbox or message documents. Ads are disabled in local development and automated tests.
Can I send mail?
No. Hushymaily is receive-only. There is no outgoing mail or public SMTP relay.