Privacy Notice

We collect only what is necessary to provide the service:

• Name — first and last name, provided by your Auth0 identity provider at sign-in.
• Auth0 Subject ID — a unique identifier issued by Auth0 to distinguish your account.
• Master email address — the real inbox you register as your forwarding destination.
• Camouflage email addresses — the disposable addresses you create within the service.
• Forwarding rules — the associations you define between camouflage and master emails.

We do not collect passwords, payment information, or any data beyond what is listed above.

• To authenticate your account via Auth0.
• To route emails from your camouflage addresses to your master inbox.
• To maintain your forwarding rules and account preferences.
• To enforce service limits (e.g. maximum number of camouflage addresses).

We do not sell, share, or use your data for advertising or profiling purposes.

We use a single HttpOnly session cookie to keep you signed in. This cookie contains a randomly generated session ID — no personal data is stored in it. It expires when your session ends or after a set idle period. We do not use tracking or analytics cookies.

Your data is stored in a PostgreSQL database. Authentication is handled by Auth0 — we never see or store your password.

Sessions are invalidated immediately on sign-out. Deleting your account removes all associated records, including camouflage addresses and forwarding rules.

• Access — you can view your stored data at any time from your account.
• Deletion — you can delete your account and all associated data.
• Portability — you can request a copy of your data at any time.
• Correction — you can update your master email and profile information.

For privacy-related questions or data requests, contact us at webmaster@example.com.