A shielded ZEC payment arms an anonymous inbox that self-destructs when it expires. Every message is sealed on arrival. Only your key opens it. No accounts. No surveillance. No trace.
A temporary inbox that receives real email without revealing who you are. Use it for signups, verification codes, and one-time downloads. Your real address stays private and spam-free.
Pick how long you want the inbox to live, generate it, and send the small shielded Zcash payment shown to the address shown. Once the payment confirms, your inbox goes live at a private URL and receives email in real time. No account, no signup, no personal information.
Free temp-mail services pay their bills with ads and trackers. A shielded Zcash payment funds the service while proving nothing about you: no card, no phone number, no identity. Payment is the only gate, so no accounts exist to leak.
You choose the length before you pay, from 24 hours to a full year, and the clock starts when the payment confirms. Longer tiers also hold more mail: up to 6,000 messages and 10 MB attachments on the 1-year tier, versus 200 messages and 1 MB on the 24-hour one, with every price and limit shown up front. When it expires, the inbox and every message in it are permanently purged. You can also destroy an inbox yourself at any time, which deletes it immediately.
Here is the honest shape of that promise: ztrash is a small independent service running on a single server. Your mail is sealed to your key and deliberately never copied into backups (a backup that outlived expiry would break the purge promise), so an unrecoverable server failure would lose the inbox and its mail early, and support could not restore either. Treat a long inbox as a durable pseudonym, not an archive: save anything you can't afford to lose, and set an expiry reminder so the end never surprises you. Expiry hard-purges everything, exactly as on every other tier.
Optionally, per inbox, and off by default. If you opt in, the server stores exactly one new thing until that inbox dies: the delivery address you chose, a browser push endpoint or an ntfy topic name. The reminder itself carries no content: browser pushes are sent completely empty (your browser shows a generic notice locally), and the ntfy message is a fixed sentence that names no inbox. A legal demand for this data would yield that address, the fact that some inbox opted in, and its expiry timing. Nothing about your mail, and nothing at all once the inbox has expired or been burned, because the record is deleted with it. Reminders are best effort: if the server is offline at the moment yours is due, it is skipped, never queued.
Yes: http://qmjt3c74g67jmelpw3frkwuxoa3xw56xqkpbdhxd2yflfvvc7hhkgvqd.onion, same servers, same inboxes; any inbox link works on either host by swapping the domain (your key travels in the URL fragment either way). The mirror protects the reader's network position: nobody watching your connection, or ours, sees you reading. It changes nothing for senders: mail still arrives over ordinary clearnet SMTP from the sender's provider. One practical note: your keyring is stored per-site in your browser, so the clearnet site and the mirror each keep their own. Reading mail requires Tor Browser's security level to be Standard (key derivation runs as WebAssembly, which Safer blocks).
No. Inboxes are receive-only. That keeps the service simple, abuse-resistant, and useless for spam.
No. Each message is sealed the moment it arrives, to an encryption key derived from your inbox's viewing key. The server keeps only ciphertext and a hash of that key, and decryption happens in your browser. A stolen database, a backup, or a demand for stored mail yields unreadable blobs.
No, and no service that receives ordinary email can honestly claim it. The sender's provider transmits your message like any other email (TLS in transit where the sender supports it), so it exists in server memory for the instant it takes to seal it. It is never stored readable, and never readable again by anyone but you. We'd rather show you exactly where the line is than borrow a stronger word.
No. There are no accounts, no access logs, and no archives. Expired inboxes and their mail are deleted outright. What isn't stored can't be requested.