ghostBox

What is ghostBox

ghostBox is a minimal, privacy-oriented email service built around a simple premise: pay once, use forever. As of 2026-05-30, the service charges a flat €5 fee for lifetime account creation, reserving 256 MiB of storage per user. It operates on clearnet at ghostbox.cc and supports standard email protocols-IMAP, SMTP, and POP3-through mail.ghostbox.cc. The operator explicitly markets it as "free as in free speech," distinguishing the service's stance on expression from typical platform moderation policies.

The project appears to be a solo operation. The homepage uses first-person language throughout ("I don't," "I can't," "I will only share"), suggesting a single administrator rather than a team or corporate entity. This has implications for reliability and support that prospective users should weigh.

How no-KYC is it?

ghostBox is genuinely no-KYC. No identity documents, phone numbers, or even persistent email addresses are required to register. The signup process works by checking alias availability via email to postmaster@ghostbox.cc, then paying the €5 fee. The site notes that users can even request an account using a temporary email address, since ghostBox accepts inbound mail from any server or domain.

This makes ghostBox one of the more accessible anonymous email options-no invite codes, no waiting lists, no social graph requirements. The kycnot.me listing previously characterized it as "No KYC mention," but the official site makes the absence of verification explicit through its operational design rather than policy statements.

Privacy & security

ghostBox takes an unusually honest approach to email encryption that deserves attention. The operator states directly that "Email E2EE is a myth" for standard email, explaining that messages must be received unencrypted before server-side encryption can apply. Unlike competitors that obscure this limitation, ghostBox disclaims end-to-end encryption entirely: "ghostBox emails aren't encrypted. The server disk is, but that's about it."

Other privacy claims include:

• Server encryption (disk-level)
• No logging
• No automatic backups
• Swiss jurisdiction for user data
• Data sharing only under compelled court order with valid jurisdiction

The Switzerland hosting location is confirmed on-site, though no specific datacenter or provider is named. The no-logs claim is unverified by third-party audit. The absence of automatic backups is framed as a privacy feature but also represents a data-loss risk users must accept.

Payments, fees & limits

The pricing model is deliberately simple: €5 one-time payment per account, with no recurring charges. This fee serves dual purposes-keeping the IP reputation clean (reducing spam incentive) and funding 256 MiB of perpetual storage. No refund policy is mentioned.

Payment methods are not explicitly listed on the homepage crawl. The older kycnot.me metadata tagged ghostBox under "Monero," suggesting cryptocurrency acceptance, but the current site crawl does not confirm which specific currencies or chains are supported. The €5 denomination implies fiat processing, though crypto may be available through less visible checkout flows.

Storage is capped at 256 MiB per account-sufficient for text-heavy use but constraining for attachments. Custom domains are supported, adding flexibility for users wanting branded addresses without platform dependency.

User experience & support

Account management is straightforward: Roundcube webmail is available, plus any standard email client (Thunderbird, etc.) via manual configuration. Server settings are clearly documented:

• SMTP: ports 25 (unencrypted), 587 (STARTTLS), 465 (implicit TLS)
• IMAP: ports 143 (STARTTLS), 993 (implicit TLS)
• POP3: ports 110 (STARTTLS), 995 (POP3S)

Password recovery is explicitly unavailable. The operator states: "I can't recover lost passwords as I can't verify that you're the account owner." This is consistent with the no-KYC design but places full responsibility on users to secure credentials. No ticket system, chat, or documented SLA is visible.

The external search results reveal no active user community, no Reddit discussions of the email service, and no recent outage reports. This silence is double-edged: no scandal, but also no social proof of sustained operation.

Who it's for

ghostBox suits privacy-conscious users who prioritize anonymity over convenience, understand email's cryptographic limitations, and accept single-operator risk. The ideal user likely:

• Needs a stable alias for registrations or communications
• Values Swiss jurisdiction and explicit no-logging claims
• Can manage their own credentials and client configuration
• Does not require large attachments or collaborative features

It compares unfavorably to Proton Mail or Tutanota for users wanting built-in E2EE, mobile apps, or enterprise features. Against other no-KYC email options like Mailum or simpler forwarders, ghostBox's honesty about encryption and its one-time pricing may appeal to technically literate privacy advocates.

The service is not suitable for users needing password recovery, large storage, guaranteed uptime, or regulatory compliance documentation.