Questions, answered plainly

It is free and public. There are no accounts, API keys, paid plans or rate limits, and there will never be a paid tier. Costs stay low because nothing is kept: mail is deleted quickly and nobody is tracked. There are no ads either.

24 hours after your last visit. Keeping the page open, or making any API call with the token, pushes the deadline forward, so an inbox you use stays alive. The dial next to the address shows the time left.

Single messages are deleted after 7 days at the latest, and an inbox holds 100 messages: when a new one arrives, the oldest goes.

Yes, from the same browser. The key to each inbox is stored in this browser only; up to 8 recent inboxes are listed under “Saved inboxes”. If one has expired, the page brings it back automatically, empty, as long as you return within 30 days. During those 30 days nobody else can claim the address.

If you clear your browser data or click “Forget”, the key is gone and so is the inbox. A burned inbox cannot come back.

Yes: “Choose name” (or the E key). Names are 3–40 characters of a–z, 0–9, dot, dash and underscore, starting and ending with a letter or digit. Names like admin, postmaster or support are reserved, and a name that is in use or recently used is locked.

Short, common names are easy to guess. Anyone who guesses an address can send to it, though they cannot read it.

No. NRTHMAIL only receives. There is no outgoing mail, no forwarding and no reply button.

Only someone holding its key, the token stored in your browser. The address alone lets people send mail to it, not read it. Even so, treat a disposable inbox as semi-public: never use it for banking, for your main accounts, or for anything you would need to recover later.

Anything after a + in the address is a tag. quiet.fjord47+shop@nrthmail.com and quiet.fjord47+news@nrthmail.com both land in quiet.fjord47@nrthmail.com, and the log shows the tag, so you can see which site sent what.

Remote images can tell the sender when and where you opened a message. They are blocked by default, and the reader says how many were blocked. “Load images” shows them for that one message. Images embedded in the message itself always show.

Press “QR” (or Q) and scan the code with your phone. The code works once and expires after 2 minutes. The key travels inside the page, never in the link, so it does not end up in your history or in a server log.

It deletes every message and attachment immediately, ends the inbox, and locks the address for 30 days so nobody else can pick it up and receive your follow-up mail. It cannot be undone. The page then opens a fresh address.

Check the address character by character; the Copy button avoids typos. Some senders take a minute or more. Messages larger than 25 MB are refused. And some sites reject disposable domains outright: their mail never leaves them, and there is nothing we can do about that.

Yes, a public REST API with long-polling and live events, documented on the API page. No key, no sign-up and no rate limits. The only limits are storage sizes and retention times, listed there.

Message HTML is sanitized: scripts, forms and embedded objects are removed and the body is shown in a sandbox. Attachments are not scanned. Open only what you expected to receive, and check where a link goes before you follow it; the reader shows the host next to the verification link.

Write to abuse@nrthmail.com with the address and the time. Reports are read by a person.