Privacy Policy

What we store

• Your account email— the real address you sign up with. It's used only as the destination we forward mail to, and it is never shown to anyone you give an alias to.
• Your aliases — the disposable addresses you create on maskbox.net, plus any labels you add.
• Forwarded messages — when mail is sent to one of your aliases, we store a copy (sender, subject, body) so you can read it on the site. This copy is visible only to you.
• Basic forwarding logs — which alias received mail, from whom, and when.

What we don't do

• We don't sell, rent, or share your email or your mail with anyone.
• We don't read your messages or use their contents for advertising.
• We don't require a password — sign-in is a one-time magic link.
• We block remote images by default when you read a message, so tracking pixels don't fire unless you choose to load them.

Who can see your data

Only you, via your signed-in account. Access is enforced at the database level (row-level security), so one account can never read another's aliases or mail.

Service providers we use

To run the service we rely on a small number of processors:

• Vercel — hosting.
• Supabase — database and authentication.
• Resend — receiving and sending (forwarding) email.

Your mail necessarily passes through these providers to be delivered. We don't add any third-party advertising or tracking.

Deleting your data

Delete any alias at any time from your dashboard — its stored messages go with it. To delete your entire account and all associated data, email us (see below) and we'll remove it.

Beta notice

Maskboxis in early beta. Features and this policy may change; we'll update the date above when they do.

Contact

Questions or deletion requests: reach out via the feedback button in the app, or email privacy@maskbox.net.