Home/About

About

Three decisions, and what each one costs.

inbox.my is a small, deliberately narrow product: one good email address, encrypted so we cannot read it, paid for without telling us who you are. Everything else follows from those three choices — including the parts you will not like.

DECISION 01

Sell the name, not just the mailbox

Short email addresses ran out on every major provider around 2008 and are never coming back — the supply is finite and permanently spent. A new domain is the only way anyone gets a three-letter handle again.

The cost: we price by scarcity, so the best names are not $99, and there is no free tier to absorb people who just want a mailbox.

DECISION 02

Hold no key we could be made to use

Most "encrypted email" encrypts your mail with a key the provider also holds. That defends against a stolen disk and nothing else — not a subpoena, not an insider, not a policy change after an acquisition. Your key is derived on your device and never sent.

The cost: we cannot reset your passphrase, we cannot search your mail server-side, and there is no undelete.

DECISION 03

Never learn who you are

No phone number, no ID, no KYC — and crypto-only payment, because a card number is an identity document carrying your legal name, your address and a bank's permanent record. The strongest privacy guarantee is not collecting the data.

The cost: no cards, no PayPal, no refunds, and a checkout that asks more of you than a one-click purchase does.

The thing nobody explains

Why spam filtering sits before the encryption

Every zero-knowledge mail service runs into the same wall: you cannot scan what you cannot read. Some solve it by keeping a key. Some solve it by having barely any filtering and calling that a privacy feature.

We solved it with ordering. Inbound mail is scored at the gateway, in memory, at the instant it arrives — and only then sealed to your key and written to disk. Nothing scans ciphertext at rest, because nothing can. The honest caveat is that for a few hundred milliseconds during scoring, the message exists in memory in the clear. That is true of every provider that filters spam at all; we would rather state it than let you assume otherwise.

The full architecture →

what we chose, and what it cost
+ chosen zero-knowledge encryption - cost no password reset, ever + chosen per-object crypto-shredding - cost no undelete, no recovery bin + chosen crypto-only payment - cost no cards, no refunds + chosen strict no-bulk policy - cost you cannot use us for campaigns + chosen scarcity pricing on names - cost no free tier

What we will always tell you

Four commitments that are cheap to write and expensive to keep, which is the only kind worth publishing:

  • We will name our limits. The encryption has not been independently audited. Metadata exists. Mail to a recipient without PGP is not end-to-end encrypted. Every one of those is stated on the page where it matters, not buried in a footnote.
  • We will not promise inbox placement. We control authentication and sending reputation. The receiving server decides, and your content and volume feed into that. Any provider guaranteeing placement is selling a thing that does not exist.
  • We will tell you to buy elsewhere when that is right. The comparison page names the cases where Proton Mail, Tuta, Gmail or a dedicated sending platform is the better choice. Given there are no refunds, this is the minimum decency.
  • We will not quietly change the deal. A lifetime licence is locked against price rises. If policy changes, existing customers are told before it applies to them.

Who operates it

inbox.my is operated as an Owrbit property. Billing, invoices, renewals and support tickets are handled through portal.owrbit.com, which is where your checkout leads and where your account lives. Governing law, jurisdiction and the full contractual terms are set out in the terms of service.

What we are not

Not a bulk sending platform. Not a temporary or disposable mail service. Not a way to avoid being identified while doing something illegal — encrypted content does not make fraud, phishing or harassment untraceable, and abuse gets an account suspended here faster than at a provider that has to review a report by hand first.

What it is: a good address, mail that stays yours, and no reason for us to know your name.

If those trade-offs sound right, the rest is easy.

Check a name, pay in crypto, and be sending in under ten minutes.

$99 / year or $599 for life · Crypto only · All sales final · No phone number, no KYC